A furnace fuel solenoid is wired so that loss of power or loss of signal closes the fuel valve. Which design principle is this?
- A.Active redundancy with hot standby
- B.Fail-safe de-energize to trip design
- C.Diverse programming of two logic solvers
- D.Energize to trip design with battery backup
Why B is correct
De-energize to trip means the safe action occurs when energy or signal is lost, so wiring faults and power loss drive the plant safe. Energize to trip needs power to act and is used where loss of power would itself be hazardous.
Know someone studying for OT Security Fundamentals? Send them this one.