Skip to content

Enterprise Architect interview questions

100 real questions with model answers and explanations for Solutions Architect candidates.

See a Enterprise Architect resume example

Practice with flashcards

Spaced repetition · Hunter Pass

Questions

The solutions architect owns the checkout design, while the enterprise architect sets direction across the wider organization.

  • The solutions architect defines the checkout components, APIs, data flows, deployment shape, and NFRs for that bounded solution.
  • The enterprise architect maps checkout to business capabilities and checks its fit with shared identity, payments, data, and cloud direction.
  • A decision such as using PostgreSQL for this service can stay local, but introducing a second customer master affects several systems and needs enterprise review.
  • At junior level, I would own the solution artifacts and raise cross-domain impacts rather than claim authority over the whole portfolio.

Why interviewers ask this: The interviewer checks whether you distinguish bounded solution design from organization-wide technology direction and know when to escalate an impact.

escalationdesign

I would keep ownership of the portal design but escalate the shared customer identity problem as an enterprise concern.

  • I would document the three ID formats, synchronization paths, data owners, and the portal failure caused by mismatched records.
  • For the portal, I could design an adapter behind a stable customer lookup API so delivery is not blocked.
  • I would not declare the portal database the new customer master because that changes ownership for three existing applications.
  • I would take the evidence and options to the enterprise or data architect, with the temporary adapter recorded as a risk and an ADR.

Why interviewers ask this: A strong answer shows practical ownership without letting a local project silently redefine shared data architecture.

I would turn the outcome into a small capability chain before choosing applications.

  • The needed capabilities are customer identification, product configuration, pricing, discount approval, quote generation, and quote delivery.
  • I would mark pricing and approval as weak if sales currently waits for spreadsheets and manager email, then confirm this with two sales users.
  • The two-hour target becomes a measurable outcome for the full chain, not a claim that every step needs a new system.
  • Only after the map is agreed would I link capabilities to CRM, pricing, document, and notification applications.

Why interviewers ask this: The interviewer is evaluating whether you can separate what the business must do from the systems that currently do it.

design

I would replace the adjectives with measurable scenarios that the team can test.

  • Performance could mean p95 page API latency below 800 ms at 200 concurrent users during the 9 AM peak.
  • Availability could mean 99.9% per calendar month, with planned maintenance explicitly included or excluded.
  • Reliability could include fewer than 1 failed document upload per 10,000 attempts and safe retry without duplicate files.
  • I would confirm the numbers with product and operations because 99.99% availability costs more than 99.9% and may not match the portal's value.

Why interviewers ask this: The interviewer checks whether you convert vague qualities into testable NFRs and expose their cost implications.

onboardingarchitecture

I would maintain a short trace from the business outcome to design and verification artifacts.

  • Link the four-hour outcome to requirements such as online document submission, automated tax validation, and one-step approval below $10,000.
  • Map those requirements to supplier onboarding, compliance checking, and approval capabilities.
  • Link each capability to the portal container, validation API, workflow service, and system of record that implements it.
  • Add acceptance measures, such as 90% of complete applications finishing within four hours, so a design element can be challenged if it supports no requirement.

Why interviewers ask this: A strong answer demonstrates simple end-to-end traceability rather than producing disconnected requirement and architecture documents.

concurrency

I would produce a verified baseline focused on decisions, not an exhaustive model.

  • Interview the order clerk, support engineer, and one application owner, then observe one normal order and one failed order.
  • Create an application inventory with owner, purpose, lifecycle, data, hosting, criticality, and support status for all four systems.
  • Draw a C4 context or container view showing users, applications, protocols, and the nightly CSV plus two synchronous API dependencies.
  • Record baseline facts such as 1,200 orders per day, a 24-hour stock delay, and 3% manual rework, with unknowns clearly marked.

Why interviewers ask this: The interviewer wants a time-boxed current-state package grounded in observed facts and useful metrics.

architecture

The target state should show the intended behavior, responsibilities, and measurable outcome without pretending every implementation detail is settled.

  • Show the inventory system as the stock system of record and the storefront as a consumer, with ownership named for both.
  • Select an event or incremental API flow that can deliver accepted changes within five minutes and define retry and reconciliation behavior.
  • Include target NFRs such as 99.9% update-path availability and an RPO of 15 minutes for the integration state.
  • Mark transition constraints, for example keeping the nightly file for 30 days as a reconciliation control before removal.

Why interviewers ask this: The interviewer checks whether your target state combines structure, ownership, quality targets, and a realistic transition condition.

onboarding

I would compare the current and target onboarding across process, data, ownership, and automation, then turn each gap into a transition action.

  • Process: map sequential handoffs and wait times from approved hire to ready employee, then compare them with a target where HR triggers identity and facilities work in parallel.
  • Data: compare repeated entry of name, start date, location, role, and equipment needs with one approved onboarding record, identifying missing sources, field rules, and transfers.
  • Ownership: replace fragmented queue responsibility with an HR case owner and named identity and facilities owners working to 1-day internal deadlines, with a RACI and escalation path.
  • Automation and transition: replace email and manual status chasing with workflow triggers, shared status, and overdue alerts, then pilot 20 hires and expand only when at least 90% finish within 2 days with under 2% data rework.

Why interviewers ask this: A strong answer compares several architecture dimensions and makes the move from a 9-day baseline to a measurable 2-day target testable.

I would use the ADM as an iterative path from scope to controlled change, tailoring the artifacts to the small platform.

  • Preliminary and Phase A establish the method, stakeholders, scope, constraints, Architecture Vision, and approval to proceed.
  • Phases B, C, and D describe baseline and target business, data, application, and technology architectures with gaps.
  • Phases E and F group work packages, compare transition options, and produce an implementation and migration plan.
  • Phases G and H govern delivery and later change, while Requirements Management keeps decisions linked to requirements throughout.

Why interviewers ask this: The interviewer is checking practical understanding of ADM flow and outputs rather than memorized certification trivia.

Preliminary sets how architecture work will run, and Phase A agrees what this specific effort will achieve.

  • Preliminary can define the lightweight method, modeling notation, repository, decision roles, and principles such as API-first integration.
  • Phase A identifies warehouse, customer service, finance, security, and product stakeholders plus their concerns.
  • The Architecture Vision shows the high-level current problem, target concept, expected reduction from five days to two, scope, and exclusions.
  • A statement of architecture work records deliverables, dates, assumptions, constraints, and approval for the next phases.

Why interviewers ask this: A strong answer distinguishes setting up the architecture practice from authorizing and framing one architecture engagement.

onboardingconcurrency

Phase B should describe the baseline and target business architecture and expose the business gaps.

  • Baseline artifacts can show a value stream from offer accepted to productive employee, with seven manual handoffs and a five-day lead time.
  • A capability map can highlight identity provisioning and equipment fulfillment as weak capabilities.
  • The target process can assign HR as case owner and trigger IT and facilities work in parallel, aiming for completion before day one.
  • The gap list should name missing workflow ownership, inconsistent approval rules, and absent status visibility without choosing cloud products yet.

Why interviewers ask this: The interviewer checks whether you keep Phase B centered on business behavior, capabilities, roles, and outcomes.

Phase C should define the target data and application architecture needed to stop the copying.

  • The data view names customer, contact, and ticket entities, with CRM as customer system of record and a business data owner.
  • The application view assigns CRM to customer management and the ticketing tool to case management rather than duplicating both roles.
  • A target integration exposes a customer lookup contract and passes customer_id into tickets instead of copying 18 profile fields.
  • Baseline-to-target gaps include duplicate data, no stable identifier, missing API capability, and a required cleanup before cutover.

Why interviewers ask this: A strong answer covers both data and application responsibilities with explicit ownership and gaps.

design

Phase D defines the technology architecture that supports the application and its quality targets.

  • The baseline might be one virtual machine and one database in a single zone, creating two single points of failure.
  • The target can place stateless web instances behind a load balancer across two AZs and use a multi-AZ managed database.
  • Technology standards specify supported runtime, network segmentation, encryption, monitoring, backup, and Terraform modules.
  • The gap output identifies the second-zone resources, health checks, database failover, and recovery test needed to meet the target.

Why interviewers ask this: The interviewer evaluates whether you connect technology choices to an explicit resilience requirement and gap list.

api

Phase E shapes viable transition options, while Phase F turns the selected option into a sequenced migration plan.

  • Phase E groups work into API contract, producer change, consumer change, monitoring, and file retirement work packages.
  • It can compare direct cutover with 30 days of parallel API and file operation, including cost, risk, and business value.
  • Phase F sequences dependencies, assigns owners and dates, and places contract testing before consumer cutover.
  • The migration plan includes milestones such as 95% API parity by week 6, rollback criteria, and file shutdown after two clean reconciliations.

Why interviewers ask this: The interviewer checks whether you distinguish option and work-package design from detailed prioritization and scheduling.

Phase G checks implementation conformance, Phase H manages later architecture change, and Requirements Management maintains traceability across both.

  • In Phase G, review the deployed API against the approved contract, security controls, 500 ms latency target, and recorded ADRs.
  • Record a material deviation, such as unencrypted file fallback, with an owner, remediation date, and accepted risk rather than silently changing the target.
  • In Phase H, assess a new partner-volume forecast to decide whether it is a small architecture update or a new ADM cycle.
  • Requirements Management links the forecast and NFR changes to affected designs, work packages, tests, and approvals.

Why interviewers ask this: A strong answer describes concrete conformance, change, and traceability activities after target designs are approved.

The layers separate business behavior, software support, and infrastructure while preserving links between them.

  • The business layer can show the Customer actor, Handle Return process, and Return Management business service.
  • The application layer can show Returns Portal and Order Service components plus the Return Eligibility application service.
  • The technology layer can show Kubernetes nodes, PostgreSQL system software, and a messaging technology service.
  • Linking the layers lets a reviewer trace a customer-facing return service down to the applications and runtime it depends on.

Why interviewers ask this: The interviewer checks that you can place common elements in the correct ArchiMate layer and explain why the separation helps.

concurrency

I would choose relationships by the exact semantic statement the model needs to make.

  • Use serving from the Return Eligibility application service to the Handle Return business process because the service supports that behavior.
  • Use realization from the Return Eligibility application function to the application service because the behavior implements the exposed service.
  • Use access from the application behavior to the Order data object, marked read-only if the viewpoint needs that detail.
  • Use assignment from the Returns Application component to that function to show which active structure performs the behavior.

Why interviewers ask this: A strong answer uses ArchiMate relationship semantics rather than connecting every element with an unlabeled association.

code-review

I would create two focused views from one model because the stakeholders have different concerns.

  • The product view shows customer actors, the returns value stream, business services, key capabilities, and the applications that support them.
  • The platform view shows application components, technology services, nodes, networks, and deployment dependencies across two AZs.
  • Both views retain shared element identifiers, so Returns Portal means the same component in each view.
  • I would omit low-level infrastructure from the product view and business motivation detail from the platform view to keep each discussion readable.

Why interviewers ask this: The interviewer evaluates whether you treat a viewpoint as a stakeholder-specific selection from a consistent model.

I would trace the measurable goal through business behavior to application and technology support.

  • Connect the ten-minute goal and its requirement to the Refund Approval business process and Refund Management business service.
  • Show the Customer Service Agent assigned to the process and the Refund Approval capability associated with the required ability.
  • Model a Refund Workflow application service serving the business process, with an application function realizing that service and the Refund Workflow component assigned to the function.
  • Show the function accessing Refund Case data and trace the component through its artifact and deployment node so the operational dependency remains visible.

Why interviewers ask this: A strong answer demonstrates cross-layer traceability with a compact scenario instead of listing ArchiMate element types.

containersdesigncomponents

I choose the lowest level needed to answer the review question and avoid showing all levels by default.

  • Use a context diagram to agree the system boundary, users, and external systems with business and security stakeholders.
  • Use a container diagram to discuss deployable or runnable units, data stores, protocols, and ownership with delivery teams.
  • Use a component diagram only when the internal responsibilities of one container are unclear or risky.
  • For a 30-minute kickoff, I would start with context and one container view, then add a component view for the complex integration service if needed.

Why interviewers ask this: The interviewer checks whether your diagram choice follows the audience and decision rather than a documentation ritual.

Locked questions

  • 21

    What should appear on a C4 context diagram for a supplier onboarding system?

    onboardingsystem-design
  • 22

    What would you show on a C4 container diagram for a portal with a React UI, Java API, PostgreSQL database, and message broker?

    databasepostgrescontainers
  • 23

    When is a C4 component diagram useful for an integration API, and what should it contain?

    componentsapi
  • 24

    When would you use ArchiMate instead of C4, and when would you use both?

  • 25

    How would you build a first-level capability map for a 200-person online retailer?

  • 26

    You must choose one of six capabilities for a small improvement project. How would you use a capability heatmap?

    charts
  • 27

    What is a value stream, and how would you map one for resolving a customer return?

  • 28

    How do you connect a value stream to capabilities and applications without turning the model into a spaghetti diagram?

  • 29

    CRM and billing contain different customer addresses. How would you identify the system of record?

    system-design
  • 30

    What is the difference between a data owner and an application owner for supplier records?

  • 31

    What fields belong in a lightweight application inventory for a department with 25 systems?

    system-design
  • 32

    How would you create and validate a dependency inventory for a payroll service before a weekend change?

    validationdependencies
  • 33

    What is the difference between an architecture principle, a technology standard, and a reference architecture?

    architecture
  • 34

    How would you write a useful architecture principle for buying rather than building commodity capabilities?

    architecture
  • 35

    A team cannot meet the standard requiring TLS 1.3 because a vendor gateway supports only TLS 1.2 for three months. What should you do?

    procurementtlsgateway
  • 36

    How would you use a two-AZ web application reference architecture for a portal handling only 20 requests per second?

    architecture
  • 37

    What should an ADR contain for choosing asynchronous events instead of REST between order and warehouse systems?

    warehouserestsystem-design
  • 38

    When should you create or update an ADR, and how should a later decision replace it?

  • 39

    Write measurable NFRs for a staff directory used by 2,000 employees during business hours.

  • 40

    What does 99.9% monthly availability mean for a service, and what would you clarify before accepting it?

  • 41

    A finance application has RTO 4 hours and RPO 15 minutes. What do those numbers mean, and how would they affect a basic design?

    design
  • 42

    A checkout needs an immediate fraud decision, while analytics needs a copy of completed orders. Would you use REST or events for each integration?

    rest
  • 43

    When would you choose batch or file transfer instead of an API or event stream for sending payroll data to a bank?

    batchapi
  • 44

    A warehouse can expose a REST API, publish stock events, or export a file every hour. How would you select one for a storefront needing stock updates within five minutes?

    restwarehouse
  • 45

    What belongs in an API contract for creating a supplier?

    api
  • 46

    How would you add an optional tax_id field to a public API without breaking three existing consumers?

    api
  • 47

    Explain cloud regions, availability zones, and shared responsibility for a customer portal that must survive one data-center failure.

    availabilitycloud-fundamentalscloud-regions
  • 48

    Why use Infrastructure as Code for a small two-AZ portal, and what would you put under code control?

    iac
  • 49

    How would you maintain a simple risk, assumption, and constraint log for a 12-week CRM integration?

  • 50

    How would you identify stakeholders and create a RACI for approving a new supplier API?

    stakeholder-managementraciapi
  • 51

    A public portal must meet WCAG 2.2 AA in 10 weeks, and accessibility testing finds failures in 14 user journeys; what architecture evidence and handoff would you prepare?

    a11yarchitecturetesting
  • 52

    In a register of 48 applications, 11 owner entries name employees who have left, and a migration workshop starts in 5 days; what action would you take?

    migrationscloud-migration
  • 53

    A partner currently emails an 80,000-row CSV every week; how would you design a controlled SFTP or object-storage exchange?

    formsdesign
  • 54

    A C4 container diagram is 18 months old, while three services were added, two retired, and one database split; how would you repair it before Friday's review?

    containersdatabase
  • 55

    A C4 diagram shows the order service calling payments directly, but 7 days of traces show an API gateway and a queue in the path, which the team calls temporary; what should you document?

    gatewayapi-gatewayapi
  • 56

    What would you put in an ADR comparing managed and self-hosted PostgreSQL for a 6-person team, 99.9% availability, 500 GB of data, and a $90,000 annual cap?

    postgres
  • 57

    You are reviewing an ADR that proposes Redis for a 500-request-per-second catalog API launching in 4 weeks, but it omits capacity, security, and failure behavior; what feedback would you give?

    feedbackcode-reviewapi
  • 58

    Two SaaS vendors are being considered for 900 users; the service must keep p95 latency below 800 ms, cost under $120,000 per year, store data in the EU, and support SAML; how would you compare them?

    procurementlatencycloud
  • 59

    Vendor A advertises 300 ms latency and Vendor B advertises 500 ms, but your 1,000-request test measures p95 of 650 ms for A and 420 ms for B; what action would you take?

    procurementlatency
  • 60

    Vendor A costs $9 per user per month and has an EU region plus a current SOC 2 report, while Vendor B costs $12 per user per month and offers customer-managed keys but no recent penetration test; for 500 users, a $65,000 annual cap, and restricted data, how would you proceed?

    procurementcloud-regions
  • 61

    You must assess a three-tier .NET application with a web tier, two application servers, a 300 GB SQL Server database, 99.9 percent availability, and one 4-hour monthly maintenance window for a cloud migration in 6 months; what would you examine?

    sqldatabasemigrations
  • 62

    A 12-year-old Java application runs on an unsupported OS, depends on a physical license dongle, and is scheduled for retirement in 18 months; which 6R action would you recommend for this single application?

  • 63

    A customer portal handles 200 requests per second, needs a 30-minute RTO, has a team of 4, and must leave its data center in 4 months; would you rehost, replatform, or refactor it?

    refactoring
  • 64

    A client must export 1.2 million records from a paginated REST API with 1,000 items per page and finish within 30 minutes; how would you design the export?

    restdesign
  • 65

    One partner must receive signed webhooks at 600 deliveries per minute; how would you design delivery and recovery?

    designwebhooks
  • 66

    A synchronous credit-check dependency has a 700 ms SLA and currently times out on 2% of calls; what timeout, retry, circuit-breaker, and degraded behavior would you define?

    resiliencedependencies
  • 67

    A partner allows only 100 API requests per minute, but you must send 600,000 product updates between 22:00 and 06:00; what integration action would you recommend?

    api
  • 68

    You have 2 weeks to integrate an internal application for 800 employees with Entra ID over OIDC and map users into 3 application roles; what would your plan include?

  • 69

    A SaaS product supports SAML but uses email as NameID, while your company requires an immutable employee ID and 3 group-based roles for 1,200 users; what action would you take?

    cloud-modelsimmutabilitycloud
  • 70

    SSO will replace local login for 2,500 users on Monday, and the business allows at most 15 minutes of login disruption; how would you reduce lockout risk?

  • 71

    A proposed SaaS integration sends 14 customer fields, including name, email, national ID, and salary; how would you classify and reduce the data before a 3-week pilot?

    cloud-modelscloud
  • 72

    A 50 GB restricted-data export must move to cloud storage in 4 weeks, while the security team owns KMS; what encryption handoff would you define?

    encryption
  • 73

    A 30-day OCR POC will process 10,000 representative invoices and must reach 95% required-field accuracy, p95 under 2 seconds, and cost under $0.04 per page. How would you structure the evaluation?

    concurrency
  • 74

    A diagram shows 2 web nodes behind a load balancer, but only 1 application server and 1 database support a 99.9 percent service; how would you identify and report single points of failure?

    load-balancingdatabase
  • 75

    Three API instances across 2 availability zones store sessions in one Redis VM, and the service has a 99.9 percent target; what action would you recommend?

    availabilityhigh-availabilitycompute
  • 76

    A public certificate expires in 12 days across 9 endpoints, and the accountable owner is unclear; how would you coordinate renewal?

    endpoints
  • 77

    A 600 GB database has RTO of 2 hours and RPO of 30 minutes, backup jobs are green, but no restore has been tested for 9 months; what would you do this sprint?

    agiledatabasebackups
  • 78

    A 5 TB document archive can lose up to 24 hours of data and must be available again within 24 hours, with a limited budget; what simple backup plan would you choose?

    backups
  • 79

    A billing batch runs from 23:00 to 01:00, a full database backup starts at 00:30, and 3 recent runs missed the 2-hour billing SLA due to I/O saturation; what action would you take?

    batchbackupsdatabase
  • 80

    A daily settlement job scheduled at 02:30 runs twice or not at all during daylight-saving changes in three regions. How would you design its time and scheduling semantics?

    designjobscloud-regions
  • 81

    An API team wants to rename customerId to customer_id in 6 weeks, but 3 clients release only monthly; how would you prevent a breaking change?

    versioning
  • 82

    An API rate limit will drop from 1,000 to 300 requests per minute for 8 clients in 21 days; how would you prepare and stage the change?

    rate-limiting
  • 83

    An OpenAPI diff marks a response field as required, and regenerating 5 client SDKs breaks their CI; what would you do?

    openapi
  • 84

    An event's amount field must change from decimal dollars to integer cents, and 4 consumers must migrate within 30 days; how would you avoid corrupting data?

  • 85

    After an optional event field is enabled, one of 6 consumers sends 2 percent of messages to its dead-letter queue; what immediate and follow-up actions would you take?

    data-structures
  • 86

    You have 3 weeks to run a document-search SaaS POC with 10,000 documents and 20 users; what success criteria would you set before starting?

    fundamentalscloudcloud-models
  • 87

    A cloud migration pilot moves a 100-request-per-second internal service with a 99.5 percent target over 4 weeks; what evidence would make the pilot successful?

    migrationscloud-migration
  • 88

    A POC meets its 800 ms latency and 85 percent accuracy targets at 780 ms and 91 percent, but projected annual cost is $145,000 against a $120,000 cap; what would you recommend?

    latency
  • 89

    Estimate the cloud cost for 2 application servers at $180 each per month, a $600 database, 2 TB storage at $0.10 per GB, 5 TB egress at $0.09 per GB, $150 monitoring, and 20 percent contingency; what would you present?

    estimationdatabasemonitoring
  • 90

    A cloud account has 35 resources and 20 percent of monthly spend cannot be assigned to a product; what tagging action would you take in 2 weeks?

  • 91

    A migrated application costs $6,200 in its first month against a $4,500 estimate, and egress is twice the forecast; how would you investigate and respond?

    estimation
  • 92

    A three-tier CRM with 120 GB of data and 200 users has a 4-hour Saturday migration window; what would you put on its cutover checklist?

    migrationscloud-migration
  • 93

    A cutover allows 45 minutes for rollback; login errors above 5 percent for 10 minutes or data mismatch above 0.1 percent are unacceptable; how would you use these constraints?

    rollback
  • 94

    A rehearsal of a 52-step cutover takes 3 hours 50 minutes inside a 4-hour window, while rollback takes another 70 minutes; what recommendation would you make?

    rollback
  • 95

    A new API averages 60 requests per second, must keep p95 below 400 ms and availability above 99.5 percent, and has 2 operational owners; what observability would you require?

    observabilityapi
  • 96

    A project team leaves in 2 weeks, but its new 24/7 service has 4 alerts and no agreed on-call team; what must happen before operational handoff?

    on-callalerting
  • 97

    A service generates 300 alerts per day, fewer than 5 require action, and ownership transfers in 10 days; what would you change before handoff?

    ownershipalerting
  • 98

    A vendor will retire its v1 API in 45 days; 6 internal workflows and 2 external partners depend on it, while v2 changes authentication and pagination. How would you plan the migration and shutdown?

    paginationmigrationsauth
  • 99

    You have 2 days to prepare a 30-minute architecture review for a new API used by 4 teams with a 99.9 percent target; what pre-read would you send?

    api
  • 100

    A portal must move from an old endpoint to a new endpoint in a 20-minute DNS cutover window, and the current TTL is 24 hours; how would you plan the change?

    dnsendpoints