Enterprise Architect interview questions
100 real questions with model answers and explanations for Solutions Architect candidates.
See a Enterprise Architect resume example →Practice with flashcards
Spaced repetition · Hunter Pass
Questions
The solutions architect owns the checkout design, while the enterprise architect sets direction across the wider organization.
- The solutions architect defines the checkout components, APIs, data flows, deployment shape, and NFRs for that bounded solution.
- The enterprise architect maps checkout to business capabilities and checks its fit with shared identity, payments, data, and cloud direction.
- A decision such as using PostgreSQL for this service can stay local, but introducing a second customer master affects several systems and needs enterprise review.
- At junior level, I would own the solution artifacts and raise cross-domain impacts rather than claim authority over the whole portfolio.
Why interviewers ask this: The interviewer checks whether you distinguish bounded solution design from organization-wide technology direction and know when to escalate an impact.
I would keep ownership of the portal design but escalate the shared customer identity problem as an enterprise concern.
- I would document the three ID formats, synchronization paths, data owners, and the portal failure caused by mismatched records.
- For the portal, I could design an adapter behind a stable customer lookup API so delivery is not blocked.
- I would not declare the portal database the new customer master because that changes ownership for three existing applications.
- I would take the evidence and options to the enterprise or data architect, with the temporary adapter recorded as a risk and an ADR.
Why interviewers ask this: A strong answer shows practical ownership without letting a local project silently redefine shared data architecture.
I would turn the outcome into a small capability chain before choosing applications.
- The needed capabilities are customer identification, product configuration, pricing, discount approval, quote generation, and quote delivery.
- I would mark pricing and approval as weak if sales currently waits for spreadsheets and manager email, then confirm this with two sales users.
- The two-hour target becomes a measurable outcome for the full chain, not a claim that every step needs a new system.
- Only after the map is agreed would I link capabilities to CRM, pricing, document, and notification applications.
Why interviewers ask this: The interviewer is evaluating whether you can separate what the business must do from the systems that currently do it.
I would replace the adjectives with measurable scenarios that the team can test.
- Performance could mean p95 page API latency below 800 ms at 200 concurrent users during the 9 AM peak.
- Availability could mean 99.9% per calendar month, with planned maintenance explicitly included or excluded.
- Reliability could include fewer than 1 failed document upload per 10,000 attempts and safe retry without duplicate files.
- I would confirm the numbers with product and operations because 99.99% availability costs more than 99.9% and may not match the portal's value.
Why interviewers ask this: The interviewer checks whether you convert vague qualities into testable NFRs and expose their cost implications.
I would maintain a short trace from the business outcome to design and verification artifacts.
- Link the four-hour outcome to requirements such as online document submission, automated tax validation, and one-step approval below $10,000.
- Map those requirements to supplier onboarding, compliance checking, and approval capabilities.
- Link each capability to the portal container, validation API, workflow service, and system of record that implements it.
- Add acceptance measures, such as 90% of complete applications finishing within four hours, so a design element can be challenged if it supports no requirement.
Why interviewers ask this: A strong answer demonstrates simple end-to-end traceability rather than producing disconnected requirement and architecture documents.
I would produce a verified baseline focused on decisions, not an exhaustive model.
- Interview the order clerk, support engineer, and one application owner, then observe one normal order and one failed order.
- Create an application inventory with owner, purpose, lifecycle, data, hosting, criticality, and support status for all four systems.
- Draw a C4 context or container view showing users, applications, protocols, and the nightly CSV plus two synchronous API dependencies.
- Record baseline facts such as 1,200 orders per day, a 24-hour stock delay, and 3% manual rework, with unknowns clearly marked.
Why interviewers ask this: The interviewer wants a time-boxed current-state package grounded in observed facts and useful metrics.
The target state should show the intended behavior, responsibilities, and measurable outcome without pretending every implementation detail is settled.
- Show the inventory system as the stock system of record and the storefront as a consumer, with ownership named for both.
- Select an event or incremental API flow that can deliver accepted changes within five minutes and define retry and reconciliation behavior.
- Include target NFRs such as 99.9% update-path availability and an RPO of 15 minutes for the integration state.
- Mark transition constraints, for example keeping the nightly file for 30 days as a reconciliation control before removal.
Why interviewers ask this: The interviewer checks whether your target state combines structure, ownership, quality targets, and a realistic transition condition.
I would compare the current and target onboarding across process, data, ownership, and automation, then turn each gap into a transition action.
- Process: map sequential handoffs and wait times from approved hire to ready employee, then compare them with a target where HR triggers identity and facilities work in parallel.
- Data: compare repeated entry of name, start date, location, role, and equipment needs with one approved onboarding record, identifying missing sources, field rules, and transfers.
- Ownership: replace fragmented queue responsibility with an HR case owner and named identity and facilities owners working to 1-day internal deadlines, with a RACI and escalation path.
- Automation and transition: replace email and manual status chasing with workflow triggers, shared status, and overdue alerts, then pilot 20 hires and expand only when at least 90% finish within 2 days with under 2% data rework.
Why interviewers ask this: A strong answer compares several architecture dimensions and makes the move from a 9-day baseline to a measurable 2-day target testable.
I would use the ADM as an iterative path from scope to controlled change, tailoring the artifacts to the small platform.
- Preliminary and Phase A establish the method, stakeholders, scope, constraints, Architecture Vision, and approval to proceed.
- Phases B, C, and D describe baseline and target business, data, application, and technology architectures with gaps.
- Phases E and F group work packages, compare transition options, and produce an implementation and migration plan.
- Phases G and H govern delivery and later change, while Requirements Management keeps decisions linked to requirements throughout.
Why interviewers ask this: The interviewer is checking practical understanding of ADM flow and outputs rather than memorized certification trivia.
Preliminary sets how architecture work will run, and Phase A agrees what this specific effort will achieve.
- Preliminary can define the lightweight method, modeling notation, repository, decision roles, and principles such as API-first integration.
- Phase A identifies warehouse, customer service, finance, security, and product stakeholders plus their concerns.
- The Architecture Vision shows the high-level current problem, target concept, expected reduction from five days to two, scope, and exclusions.
- A statement of architecture work records deliverables, dates, assumptions, constraints, and approval for the next phases.
Why interviewers ask this: A strong answer distinguishes setting up the architecture practice from authorizing and framing one architecture engagement.
Phase B should describe the baseline and target business architecture and expose the business gaps.
- Baseline artifacts can show a value stream from offer accepted to productive employee, with seven manual handoffs and a five-day lead time.
- A capability map can highlight identity provisioning and equipment fulfillment as weak capabilities.
- The target process can assign HR as case owner and trigger IT and facilities work in parallel, aiming for completion before day one.
- The gap list should name missing workflow ownership, inconsistent approval rules, and absent status visibility without choosing cloud products yet.
Why interviewers ask this: The interviewer checks whether you keep Phase B centered on business behavior, capabilities, roles, and outcomes.
Phase C should define the target data and application architecture needed to stop the copying.
- The data view names customer, contact, and ticket entities, with CRM as customer system of record and a business data owner.
- The application view assigns CRM to customer management and the ticketing tool to case management rather than duplicating both roles.
- A target integration exposes a customer lookup contract and passes customer_id into tickets instead of copying 18 profile fields.
- Baseline-to-target gaps include duplicate data, no stable identifier, missing API capability, and a required cleanup before cutover.
Why interviewers ask this: A strong answer covers both data and application responsibilities with explicit ownership and gaps.
Phase D defines the technology architecture that supports the application and its quality targets.
- The baseline might be one virtual machine and one database in a single zone, creating two single points of failure.
- The target can place stateless web instances behind a load balancer across two AZs and use a multi-AZ managed database.
- Technology standards specify supported runtime, network segmentation, encryption, monitoring, backup, and Terraform modules.
- The gap output identifies the second-zone resources, health checks, database failover, and recovery test needed to meet the target.
Why interviewers ask this: The interviewer evaluates whether you connect technology choices to an explicit resilience requirement and gap list.
Phase E shapes viable transition options, while Phase F turns the selected option into a sequenced migration plan.
- Phase E groups work into API contract, producer change, consumer change, monitoring, and file retirement work packages.
- It can compare direct cutover with 30 days of parallel API and file operation, including cost, risk, and business value.
- Phase F sequences dependencies, assigns owners and dates, and places contract testing before consumer cutover.
- The migration plan includes milestones such as 95% API parity by week 6, rollback criteria, and file shutdown after two clean reconciliations.
Why interviewers ask this: The interviewer checks whether you distinguish option and work-package design from detailed prioritization and scheduling.
Phase G checks implementation conformance, Phase H manages later architecture change, and Requirements Management maintains traceability across both.
- In Phase G, review the deployed API against the approved contract, security controls, 500 ms latency target, and recorded ADRs.
- Record a material deviation, such as unencrypted file fallback, with an owner, remediation date, and accepted risk rather than silently changing the target.
- In Phase H, assess a new partner-volume forecast to decide whether it is a small architecture update or a new ADM cycle.
- Requirements Management links the forecast and NFR changes to affected designs, work packages, tests, and approvals.
Why interviewers ask this: A strong answer describes concrete conformance, change, and traceability activities after target designs are approved.
The layers separate business behavior, software support, and infrastructure while preserving links between them.
- The business layer can show the Customer actor, Handle Return process, and Return Management business service.
- The application layer can show Returns Portal and Order Service components plus the Return Eligibility application service.
- The technology layer can show Kubernetes nodes, PostgreSQL system software, and a messaging technology service.
- Linking the layers lets a reviewer trace a customer-facing return service down to the applications and runtime it depends on.
Why interviewers ask this: The interviewer checks that you can place common elements in the correct ArchiMate layer and explain why the separation helps.
I would choose relationships by the exact semantic statement the model needs to make.
- Use serving from the Return Eligibility application service to the Handle Return business process because the service supports that behavior.
- Use realization from the Return Eligibility application function to the application service because the behavior implements the exposed service.
- Use access from the application behavior to the Order data object, marked read-only if the viewpoint needs that detail.
- Use assignment from the Returns Application component to that function to show which active structure performs the behavior.
Why interviewers ask this: A strong answer uses ArchiMate relationship semantics rather than connecting every element with an unlabeled association.
I would create two focused views from one model because the stakeholders have different concerns.
- The product view shows customer actors, the returns value stream, business services, key capabilities, and the applications that support them.
- The platform view shows application components, technology services, nodes, networks, and deployment dependencies across two AZs.
- Both views retain shared element identifiers, so Returns Portal means the same component in each view.
- I would omit low-level infrastructure from the product view and business motivation detail from the platform view to keep each discussion readable.
Why interviewers ask this: The interviewer evaluates whether you treat a viewpoint as a stakeholder-specific selection from a consistent model.
I would trace the measurable goal through business behavior to application and technology support.
- Connect the ten-minute goal and its requirement to the Refund Approval business process and Refund Management business service.
- Show the Customer Service Agent assigned to the process and the Refund Approval capability associated with the required ability.
- Model a Refund Workflow application service serving the business process, with an application function realizing that service and the Refund Workflow component assigned to the function.
- Show the function accessing Refund Case data and trace the component through its artifact and deployment node so the operational dependency remains visible.
Why interviewers ask this: A strong answer demonstrates cross-layer traceability with a compact scenario instead of listing ArchiMate element types.
I choose the lowest level needed to answer the review question and avoid showing all levels by default.
- Use a context diagram to agree the system boundary, users, and external systems with business and security stakeholders.
- Use a container diagram to discuss deployable or runnable units, data stores, protocols, and ownership with delivery teams.
- Use a component diagram only when the internal responsibilities of one container are unclear or risky.
- For a 30-minute kickoff, I would start with context and one container view, then add a component view for the complex integration service if needed.
Why interviewers ask this: The interviewer checks whether your diagram choice follows the audience and decision rather than a documentation ritual.
Locked questions
- 21
What should appear on a C4 context diagram for a supplier onboarding system?
onboardingsystem-design - 22
What would you show on a C4 container diagram for a portal with a React UI, Java API, PostgreSQL database, and message broker?
databasepostgrescontainers - 23
When is a C4 component diagram useful for an integration API, and what should it contain?
componentsapi - 24
When would you use ArchiMate instead of C4, and when would you use both?
- 25
How would you build a first-level capability map for a 200-person online retailer?
- 26
You must choose one of six capabilities for a small improvement project. How would you use a capability heatmap?
charts - 27
What is a value stream, and how would you map one for resolving a customer return?
- 28
How do you connect a value stream to capabilities and applications without turning the model into a spaghetti diagram?
- 29
CRM and billing contain different customer addresses. How would you identify the system of record?
system-design - 30
What is the difference between a data owner and an application owner for supplier records?
- 31
What fields belong in a lightweight application inventory for a department with 25 systems?
system-design - 32
How would you create and validate a dependency inventory for a payroll service before a weekend change?
validationdependencies - 33
What is the difference between an architecture principle, a technology standard, and a reference architecture?
architecture - 34
How would you write a useful architecture principle for buying rather than building commodity capabilities?
architecture - 35
A team cannot meet the standard requiring TLS 1.3 because a vendor gateway supports only TLS 1.2 for three months. What should you do?
procurementtlsgateway - 36
How would you use a two-AZ web application reference architecture for a portal handling only 20 requests per second?
architecture - 37
What should an ADR contain for choosing asynchronous events instead of REST between order and warehouse systems?
warehouserestsystem-design - 38
When should you create or update an ADR, and how should a later decision replace it?
- 39
Write measurable NFRs for a staff directory used by 2,000 employees during business hours.
- 40
What does 99.9% monthly availability mean for a service, and what would you clarify before accepting it?
- 41
A finance application has RTO 4 hours and RPO 15 minutes. What do those numbers mean, and how would they affect a basic design?
design - 42
A checkout needs an immediate fraud decision, while analytics needs a copy of completed orders. Would you use REST or events for each integration?
rest - 43
When would you choose batch or file transfer instead of an API or event stream for sending payroll data to a bank?
batchapi - 44
A warehouse can expose a REST API, publish stock events, or export a file every hour. How would you select one for a storefront needing stock updates within five minutes?
restwarehouse - 45
What belongs in an API contract for creating a supplier?
api - 46
How would you add an optional tax_id field to a public API without breaking three existing consumers?
api - 47
Explain cloud regions, availability zones, and shared responsibility for a customer portal that must survive one data-center failure.
availabilitycloud-fundamentalscloud-regions - 48
Why use Infrastructure as Code for a small two-AZ portal, and what would you put under code control?
iac - 49
How would you maintain a simple risk, assumption, and constraint log for a 12-week CRM integration?
- 50
How would you identify stakeholders and create a RACI for approving a new supplier API?
stakeholder-managementraciapi - 51
A public portal must meet WCAG 2.2 AA in 10 weeks, and accessibility testing finds failures in 14 user journeys; what architecture evidence and handoff would you prepare?
a11yarchitecturetesting - 52
In a register of 48 applications, 11 owner entries name employees who have left, and a migration workshop starts in 5 days; what action would you take?
migrationscloud-migration - 53
A partner currently emails an 80,000-row CSV every week; how would you design a controlled SFTP or object-storage exchange?
formsdesign - 54
A C4 container diagram is 18 months old, while three services were added, two retired, and one database split; how would you repair it before Friday's review?
containersdatabase - 55
A C4 diagram shows the order service calling payments directly, but 7 days of traces show an API gateway and a queue in the path, which the team calls temporary; what should you document?
gatewayapi-gatewayapi - 56
What would you put in an ADR comparing managed and self-hosted PostgreSQL for a 6-person team, 99.9% availability, 500 GB of data, and a $90,000 annual cap?
postgres - 57
You are reviewing an ADR that proposes Redis for a 500-request-per-second catalog API launching in 4 weeks, but it omits capacity, security, and failure behavior; what feedback would you give?
feedbackcode-reviewapi - 58
Two SaaS vendors are being considered for 900 users; the service must keep p95 latency below 800 ms, cost under $120,000 per year, store data in the EU, and support SAML; how would you compare them?
procurementlatencycloud - 59
Vendor A advertises 300 ms latency and Vendor B advertises 500 ms, but your 1,000-request test measures p95 of 650 ms for A and 420 ms for B; what action would you take?
procurementlatency - 60
Vendor A costs $9 per user per month and has an EU region plus a current SOC 2 report, while Vendor B costs $12 per user per month and offers customer-managed keys but no recent penetration test; for 500 users, a $65,000 annual cap, and restricted data, how would you proceed?
procurementcloud-regions - 61
You must assess a three-tier .NET application with a web tier, two application servers, a 300 GB SQL Server database, 99.9 percent availability, and one 4-hour monthly maintenance window for a cloud migration in 6 months; what would you examine?
sqldatabasemigrations - 62
A 12-year-old Java application runs on an unsupported OS, depends on a physical license dongle, and is scheduled for retirement in 18 months; which 6R action would you recommend for this single application?
- 63
A customer portal handles 200 requests per second, needs a 30-minute RTO, has a team of 4, and must leave its data center in 4 months; would you rehost, replatform, or refactor it?
refactoring - 64
A client must export 1.2 million records from a paginated REST API with 1,000 items per page and finish within 30 minutes; how would you design the export?
restdesign - 65
One partner must receive signed webhooks at 600 deliveries per minute; how would you design delivery and recovery?
designwebhooks - 66
A synchronous credit-check dependency has a 700 ms SLA and currently times out on 2% of calls; what timeout, retry, circuit-breaker, and degraded behavior would you define?
resiliencedependencies - 67
A partner allows only 100 API requests per minute, but you must send 600,000 product updates between 22:00 and 06:00; what integration action would you recommend?
api - 68
You have 2 weeks to integrate an internal application for 800 employees with Entra ID over OIDC and map users into 3 application roles; what would your plan include?
- 69
A SaaS product supports SAML but uses email as NameID, while your company requires an immutable employee ID and 3 group-based roles for 1,200 users; what action would you take?
cloud-modelsimmutabilitycloud - 70
SSO will replace local login for 2,500 users on Monday, and the business allows at most 15 minutes of login disruption; how would you reduce lockout risk?
- 71
A proposed SaaS integration sends 14 customer fields, including name, email, national ID, and salary; how would you classify and reduce the data before a 3-week pilot?
cloud-modelscloud - 72
A 50 GB restricted-data export must move to cloud storage in 4 weeks, while the security team owns KMS; what encryption handoff would you define?
encryption - 73
A 30-day OCR POC will process 10,000 representative invoices and must reach 95% required-field accuracy, p95 under 2 seconds, and cost under $0.04 per page. How would you structure the evaluation?
concurrency - 74
A diagram shows 2 web nodes behind a load balancer, but only 1 application server and 1 database support a 99.9 percent service; how would you identify and report single points of failure?
load-balancingdatabase - 75
Three API instances across 2 availability zones store sessions in one Redis VM, and the service has a 99.9 percent target; what action would you recommend?
availabilityhigh-availabilitycompute - 76
A public certificate expires in 12 days across 9 endpoints, and the accountable owner is unclear; how would you coordinate renewal?
endpoints - 77
A 600 GB database has RTO of 2 hours and RPO of 30 minutes, backup jobs are green, but no restore has been tested for 9 months; what would you do this sprint?
agiledatabasebackups - 78
A 5 TB document archive can lose up to 24 hours of data and must be available again within 24 hours, with a limited budget; what simple backup plan would you choose?
backups - 79
A billing batch runs from 23:00 to 01:00, a full database backup starts at 00:30, and 3 recent runs missed the 2-hour billing SLA due to I/O saturation; what action would you take?
batchbackupsdatabase - 80
A daily settlement job scheduled at 02:30 runs twice or not at all during daylight-saving changes in three regions. How would you design its time and scheduling semantics?
designjobscloud-regions - 81
An API team wants to rename customerId to customer_id in 6 weeks, but 3 clients release only monthly; how would you prevent a breaking change?
versioning - 82
An API rate limit will drop from 1,000 to 300 requests per minute for 8 clients in 21 days; how would you prepare and stage the change?
rate-limiting - 83
An OpenAPI diff marks a response field as required, and regenerating 5 client SDKs breaks their CI; what would you do?
openapi - 84
An event's amount field must change from decimal dollars to integer cents, and 4 consumers must migrate within 30 days; how would you avoid corrupting data?
- 85
After an optional event field is enabled, one of 6 consumers sends 2 percent of messages to its dead-letter queue; what immediate and follow-up actions would you take?
data-structures - 86
You have 3 weeks to run a document-search SaaS POC with 10,000 documents and 20 users; what success criteria would you set before starting?
fundamentalscloudcloud-models - 87
A cloud migration pilot moves a 100-request-per-second internal service with a 99.5 percent target over 4 weeks; what evidence would make the pilot successful?
migrationscloud-migration - 88
A POC meets its 800 ms latency and 85 percent accuracy targets at 780 ms and 91 percent, but projected annual cost is $145,000 against a $120,000 cap; what would you recommend?
latency - 89
Estimate the cloud cost for 2 application servers at $180 each per month, a $600 database, 2 TB storage at $0.10 per GB, 5 TB egress at $0.09 per GB, $150 monitoring, and 20 percent contingency; what would you present?
estimationdatabasemonitoring - 90
A cloud account has 35 resources and 20 percent of monthly spend cannot be assigned to a product; what tagging action would you take in 2 weeks?
- 91
A migrated application costs $6,200 in its first month against a $4,500 estimate, and egress is twice the forecast; how would you investigate and respond?
estimation - 92
A three-tier CRM with 120 GB of data and 200 users has a 4-hour Saturday migration window; what would you put on its cutover checklist?
migrationscloud-migration - 93
A cutover allows 45 minutes for rollback; login errors above 5 percent for 10 minutes or data mismatch above 0.1 percent are unacceptable; how would you use these constraints?
rollback - 94
A rehearsal of a 52-step cutover takes 3 hours 50 minutes inside a 4-hour window, while rollback takes another 70 minutes; what recommendation would you make?
rollback - 95
A new API averages 60 requests per second, must keep p95 below 400 ms and availability above 99.5 percent, and has 2 operational owners; what observability would you require?
observabilityapi - 96
A project team leaves in 2 weeks, but its new 24/7 service has 4 alerts and no agreed on-call team; what must happen before operational handoff?
on-callalerting - 97
A service generates 300 alerts per day, fewer than 5 require action, and ownership transfers in 10 days; what would you change before handoff?
ownershipalerting - 98
A vendor will retire its v1 API in 45 days; 6 internal workflows and 2 external partners depend on it, while v2 changes authentication and pagination. How would you plan the migration and shutdown?
paginationmigrationsauth - 99
You have 2 days to prepare a 30-minute architecture review for a new API used by 4 teams with a 99.9 percent target; what pre-read would you send?
api - 100
A portal must move from an old endpoint to a new endpoint in a 20-minute DNS cutover window, and the current TTL is 24 hours; how would you plan the change?
dnsendpoints