5 exercises — practice the language for Architecture Review Boards, waiver requests, architecture decision reviews, and IT governance models.
0 / 18 completed
1 / 18
A solution architect submits a proposal to use a NoSQL database for a new customer data platform. The Architecture Review Board requests changes before approval.
What is the role of an Architecture Review Board (ARB)?
An Architecture Review Board (ARB) is the governance mechanism for architecture decisions. It ensures that local decisions (one team choosing a technology or pattern) do not undermine enterprise-wide standards, security posture, or strategic direction. Typical ARB outcomes: Approved / Approved with conditions / Deferred pending clarification / Rejected with rationale. In TOGAF, the ARB is a key component of the Architecture Governance framework.
2 / 18
A team needs to use a technology that is on the enterprise Hold list due to a deadline constraint. They submit a waiver request.
What should a waiver request language include?
A waiver request is the formal mechanism for requesting an exception to an architecture standard. Good waiver language includes: (1) Scope — what specifically is being waived; (2) Justification — the business or technical reason; (3) Risk acknowledgement — what risks the exception introduces; (4) Mitigation — how those risks are managed; (5) Time bound — when the team will remediate or migrate. Waivers are exceptions, not permanent exemptions.
3 / 18
Complete the governance process description:
"All proposed changes to the enterprise reference architecture must go through an Architecture _____ Review — a structured assessment where architects evaluate the proposal against standards, risks, and strategic fit before recommending approval."
An Architecture Decision Review is a formal evaluation process — typically triggered when a team is making a significant architectural choice (adopting a new platform, changing an integration pattern, selecting a cloud provider). It is distinct from a waiver request (which asks for an exception) — a decision review is the standard process for all significant architecture choices. The output is typically an Architecture Decision Record (ADR) with the chosen option, rationale, and any constraints.
4 / 18
What best describes an IT governance model in a large enterprise?
An IT governance model defines: who makes decisions (decision rights), what decisions require escalation, how IT investment is prioritised and authorised, and how risk is monitored and reported. Common frameworks include COBIT, ITIL, and TOGAF's governance components. The governance model answers: "How does the organisation ensure that IT delivers value and manages risk?" It encompasses the ARB, investment approval, portfolio governance, and compliance mechanisms.
5 / 18
Which sentence correctly uses enterprise IT governance vocabulary in an architecture review context?
Option B demonstrates correct governance language: conditional approval (not binary approve/reject), specific conditions (security review, catalog registration), and a time bound (60 days). This is realistic ARB communication — boards rarely give unconditional approval for significant changes; conditions protect enterprise standards while unblocking delivery. Option A is a caricature of governance as obstruction. Option C normalises bypassing governance, which undermines the model entirely.
6 / 18
// Slack message from a developer during a code review
"Hey team, just noticed this API call is using the `legacy_user` endpoint. Given our recent discussions about migrating to the new user authentication service (UAS), shouldn't we be refactoring this to use it? It seems like a potential security risk and violates the principle of least privilege."
The developer is correctly highlighting a potential issue related to enterprise IT governance. Specifically, they're referencing the principle of least privilege and advocating for adherence to the UAS migration plan – both key aspects of an enterprise architecture. The other options misinterpret the situation; simply functioning code doesn't automatically meet governance standards, and using legacy systems isn't acceptable without justification based on architectural direction. This demonstrates understanding that IT governance is about more than just technical functionality.
7 / 18
PR Description:
"Implemented new feature X. Utilizing the existing 'Data Lake' for storage to align with current architecture. No significant changes anticipated."
During a code review, your team lead asks you to elaborate on the decision to use the Data Lake without a formal assessment of its suitability. Which phrase best reflects the appropriate response regarding Enterprise Architecture governance?
The correct answer emphasizes adherence to the enterprise architecture roadmap and the principle of reuse. The other options demonstrate misunderstandings regarding the importance of formal assessments, risk evaluation, and strategic alignment within an Enterprise Architecture governance framework. Simply stating cost-effectiveness or convenience doesn't justify bypassing a structured review process – it's crucial to understand that even seemingly minor deviations from established guidelines can introduce risks and inconsistencies over time.
8 / 18
// Slack message from a developer during a code review
"Hey team, just noticed this API call is using the `legacy_user` endpoint. Given our recent discussions about migrating to the new user authentication service (UAS), shouldn't we be refactoring this to use it? It seems like a potential security risk and violates the principle of least privilege."
The developer is correctly highlighting a potential issue related to enterprise IT governance. Specifically, they're referencing the principle of least privilege and advocating for adherence to the UAS migration plan – both key aspects of an enterprise architecture. The other options misinterpret the situation; simply functioning code doesn't automatically meet governance standards, and using legacy systems isn't acceptable without justification based on architectural direction. This demonstrates understanding that IT governance is about more than just technical functionality.
9 / 18
PR Description:
"Implemented new feature X. Utilizing the existing 'Data Lake' for storage to align with current architecture. No significant changes anticipated."
During a code review, your team lead asks you to elaborate on the decision to use the Data Lake without a formal assessment of its suitability. Which phrase best reflects the appropriate response regarding Enterprise Architecture governance?
The correct answer emphasizes adherence to the enterprise architecture roadmap and the principle of reuse. The other options demonstrate misunderstandings regarding the importance of formal assessments, risk evaluation, and strategic alignment within an Enterprise Architecture governance framework. Simply stating cost-effectiveness or convenience doesn't justify bypassing a structured review process – it's crucial to understand that even seemingly minor deviations from established guidelines can introduce risks and inconsistencies over time.
10 / 18
// Slack message from a developer during a code review
"Hey team, just noticed this API call is using the `legacy_user` endpoint. Given our recent discussions about migrating to the new user authentication service (UAS), shouldn't we be refactoring this to use it? It seems like a potential security risk and violates the principle of least privilege."
The developer is correctly highlighting a potential issue related to enterprise IT governance. Specifically, they're referencing the principle of least privilege and advocating for adherence to the UAS migration plan – both key aspects of an enterprise architecture. The other options misinterpret the situation; simply functioning code doesn't automatically meet governance standards, and using legacy systems isn't acceptable without justification based on architectural direction. This demonstrates understanding that IT governance is about more than just technical functionality.
11 / 18
PR Description:
"Implemented new feature X. Utilizing the existing 'Data Lake' for storage to align with current architecture. No significant changes anticipated."
During a code review, your team lead asks you to elaborate on the decision to use the Data Lake without a formal assessment of its suitability. Which phrase best reflects the appropriate response regarding Enterprise Architecture governance?
The correct answer emphasizes adherence to the enterprise architecture roadmap and the principle of reuse. The other options demonstrate misunderstandings regarding the importance of formal assessments, risk evaluation, and strategic alignment within an Enterprise Architecture governance framework. Simply stating cost-effectiveness or convenience doesn't justify bypassing a structured review process – it's crucial to understand that even seemingly minor deviations from established guidelines can introduce risks and inconsistencies over time.
12 / 18
// Slack message from a developer during a code review
"Hey team, just noticed this API call is using the `legacy_user` endpoint. Given our recent discussions about migrating to the new user authentication service (UAS), shouldn't we be refactoring this to use it? It seems like a potential security risk and violates the principle of least privilege."
The developer is correctly highlighting a potential issue related to enterprise IT governance. Specifically, they're referencing the principle of least privilege and advocating for adherence to the UAS migration plan – both key aspects of an enterprise architecture. The other options misinterpret the situation; simply functioning code doesn't automatically meet governance standards, and using legacy systems isn't acceptable without justification based on architectural direction. This demonstrates understanding that IT governance is about more than just technical functionality.
13 / 18
PR Description:
"Implemented new feature X. Utilizing the existing 'Data Lake' for storage to align with current architecture. No significant changes anticipated."
During a code review, your team lead asks you to elaborate on the decision to use the Data Lake without a formal assessment of its suitability. Which phrase best reflects the appropriate response regarding Enterprise Architecture governance?
The correct answer emphasizes adherence to the enterprise architecture roadmap and the principle of reuse. The other options demonstrate misunderstandings regarding the importance of formal assessments, risk evaluation, and strategic alignment within an Enterprise Architecture governance framework. Simply stating cost-effectiveness or convenience doesn't justify bypassing a structured review process – it's crucial to understand that even seemingly minor deviations from established guidelines can introduce risks and inconsistencies over time.
14 / 18
During a review of a new microservice deployment, the team lead identifies that the service uses an outdated protocol. Considering Enterprise IT Governance principles, what is the MOST appropriate next step?
Option A is too reactive. Refactoring immediately without understanding the impact could introduce new issues. Option B is a reasonable short-term approach while a longer-term solution is considered. Option C aligns with governance by ensuring architectural alignment and strategic guidance. Option D is unacceptable due to potential security or performance risks associated with outdated protocols.
15 / 18
```python
def process_data(raw_data):
# Uses deprecated library 'legacy_lib'
result = legacy_lib.transform(raw_data)
return result
```
In this code review scenario, which statement BEST reflects an Enterprise IT Governance concern?
Option A ignores a key governance principle. Using deprecated libraries introduces risks related to security vulnerabilities and future compatibility. Option B directly addresses the core concern – adherence to supported technologies. Option C is irrelevant to the governance issue; efficiency is a separate consideration. Option D demonstrates poor coding practice regarding data handling.
16 / 18
A development team proposes deploying a new cloud service for processing sensitive customer data. The existing Enterprise Architecture defines strict data residency requirements. What is the primary purpose of requesting an exception to this rule?
Option A is entirely inappropriate and contradicts governance principles. Option B is a secondary benefit, not the primary driver. Option C reflects the core purpose of compliance – adhering to legal requirements for data location. Option D focuses on operational efficiency and does not address the fundamental governance concern.
17 / 18
**Scenario:** A developer submits a pull request to integrate with a third-party API. The API documentation is outdated and lacks clear specifications for error handling.
**Reviewer's Comment:** 'I'm concerned about the lack of defined error codes in this integration. This could lead to inconsistent behavior across systems and make troubleshooting difficult.' Which governance principle does this comment MOST directly address?
Option A focuses on performance metrics, not the potential for inconsistent behavior. Option B directly addresses data quality – ensuring predictable and reliable outcomes from the API integration. Option C is related to risk but doesn't pinpoint the specific problem of unclear error handling. Option D is irrelevant to the governance issue.
18 / 18
During a project retrospective, the team identifies that several new features were implemented without formal architectural approval. What is the MOST important outcome of this situation from an Enterprise IT Governance perspective?
Option A ignores the fundamental purpose of governance – ensuring alignment and control. Option B represents the correct response: identifying gaps in the process and implementing improvements. Option C is overly restrictive and counterproductive to innovation. Option D undermines the entire framework of IT governance.
What does the "Enterprise IT Governance Vocabulary — Enterprise Architecture English Exercise" exercise cover?
Practice English for enterprise IT governance: Architecture Review Board, waiver requests, architecture decision reviews, and governance model language. 5 exercises.
Is this exercise free to use?
Yes. Every exercise on CoderSlingo, including this one, is free to use with no account, sign-up, or paywall.
How many questions are in "Enterprise IT Governance Vocabulary — Enterprise Architecture English Exercise"?
This exercise has 18 questions. Each one gives instant feedback with an explanation, so you can see exactly why an answer is right or wrong.
Do I need to create an account to save my progress?
No account is required. The progress bar and score are tracked in your browser for the current session -- the exercise is designed to be a quick, repeatable drill rather than something you resume later.
What happens if I get an answer wrong?
You'll see the correct answer highlighted immediately, along with a short explanation of why it's correct. Wrong answers aren't penalized beyond your score, and you can keep going through every question.
How is this exercise different from reading an article?
Articles explain vocabulary and concepts through prose, while exercises like this one are interactive drills -- multiple-choice questions -- that test and reinforce your recall of specific terms and phrasing.
Can I retry this exercise?
Yes -- use the "Try again" button on the results screen to reset your score and go through all the questions again from the start.
Where can I find more Enterprise Architecture Language exercises?
Browse the full Enterprise Architecture Language hub for related drills, or check the site-wide exercises index for other IT English topics.
Is this exercise suitable for beginners?
This exercise assumes basic familiarity with IT terminology. If a term feels unfamiliar, check the site Glossary for a plain-English definition before attempting the questions.
How often is new content like this published?
New exercises are added regularly across all categories, alongside new vocabulary sets and articles. Check back on the exercises hub to see what's new.