In a protocol pilot, what is a typical consequence when a health-check detects a fault?

• A. Immediate system shutdown with no recovery
• B. Manual failure analysis only
• C. Automatic rollback to a safe configuration, but no recovery
• D. Trigger recovery or failover procedures

Answer: (D)

When a health-check detects a fault, the system should move into remediation to keep the service available. Triggering recovery or failover procedures means automatically starting steps to restore the component or switch traffic to a healthy standby, so operations continue with minimal downtime. This automatic response aligns with resilience goals by addressing the fault without waiting for manual intervention or fully shutting down.

Shutting down immediately with no recovery would cause downtime and defeats fault tolerance. Relying solely on manual failure analysis delays response and isn’t automatic. Rolling back to a safe configuration without any recovery actions likewise leaves service restoration incomplete. The typical approach in a protocol pilot is to initiate recovery or failover to restore operation as quickly as possible.