What is a typical fault-tolerant arrangement for cockpit displays?

What is a typical fault-tolerant arrangement for cockpit displays?

• A. A single primary display with no backup.
• B. Two displays with independent data sources but no cross-check.
• C. Three displays with equal data but no cross-check or failover.
• D. Dual redundant displays with cross-checking and automatic failover.

Answer: (D)

Keeping flight information available even when parts of the system fail relies on redundancy, data verification, and automatic failover. A fault-tolerant cockpit display arrangement uses two displays that can both show the critical data, each with its own data path, so a failure in one path doesn’t wipe out the information. The two displays constantly cross-check what they’re showing, so any discrepancy can be detected and the faulty channel isolated. With automatic failover, the system switches to the healthy display without pilot intervention, preserving continuous situation awareness. This is why the dual redundant setup with cross-checking and automatic failover is the best choice. Other approaches lack one or more of these elements: a single display has no backup; two displays with independent sources but no cross-check let faults go undetected or uncorrected; three displays with equal data but no cross-check or failover don’t provide a reliable mechanism to detect faults or to switch over seamlessly when one path fails.

Keeping flight information available even when parts of the system fail relies on redundancy, data verification, and automatic failover. A fault-tolerant cockpit display arrangement uses two displays that can both show the critical data, each with its own data path, so a failure in one path doesn’t wipe out the information. The two displays constantly cross-check what they’re showing, so any discrepancy can be detected and the faulty channel isolated. With automatic failover, the system switches to the healthy display without pilot intervention, preserving continuous situation awareness.

This is why the dual redundant setup with cross-checking and automatic failover is the best choice. Other approaches lack one or more of these elements: a single display has no backup; two displays with independent sources but no cross-check let faults go undetected or uncorrected; three displays with equal data but no cross-check or failover don’t provide a reliable mechanism to detect faults or to switch over seamlessly when one path fails.