Redundancy levels and what each can achieve.
| Units fitted | Can detect a failure | Can identify which unit failed |
|---|---|---|
| One | No | No |
| Two | Yes | No |
| Three | Yes | Yes |
| Four | Yes | Yes, and survives a second failure |
Why are three units the usual minimum where the function is critical?
Answer: C
Correct answer: Three is the fewest that can identify the failed unit
The table shows the progression. One unit gives nothing to compare against. Two can detect a disagreement but cannot say which is at fault, so both must be treated as suspect and the function is effectively lost. Three allow the odd one out to be identified - it is the unit that disagrees with both others - and excluded by median voting, so the system continues on the two that agree.
Three is therefore the minimum for fail-operational behaviour. Two units certainly can detect a failure, four are not prohibited, and averaging would make the surviving output worse rather than better.
Please log in or register to report this question.