Chapter 17 Quiz: Self-Assessment

Instructions: Answer each question without looking back at the chapter. After completing all questions, check your answers against the key at the bottom. If you score below 70%, revisit the relevant sections before moving on to Chapter 18.

Multiple Choice

Q1. The fundamental tension between redundancy and efficiency exists because:

a) Engineers lack the skill to design systems that are both efficient and redundant b) Resources devoted to handling unexpected conditions are, by definition, not being used for current production c) Redundancy always costs more than the failures it prevents d) Efficiency and redundancy are unrelated concepts

Q2. A modern commercial aircraft typically has how many independent hydraulic systems?

a) One, but it is designed to extremely high reliability standards b) Two, providing a primary and a backup c) Three, each independently capable of controlling the aircraft d) Four, with two active and two in standby mode

Q3. The term "degeneracy" in the context of the genetic code refers to:

a) The degradation of DNA over evolutionary time b) Mutations that cause harmful changes to proteins c) Multiple different codons encoding the same amino acid, providing error tolerance d) The inability of DNA to repair itself after radiation damage

Q4. Toyota's just-in-time manufacturing philosophy was exposed as fragile by:

a) A labor strike in the 1970s b) Competition from American automakers c) The 2011 Japanese earthquake and tsunami, and later the COVID-19 pandemic d) A design flaw in Toyota vehicles discovered in 2010

Q5. The 2003 Northeast Blackout demonstrated that the power grid's interconnection:

a) Only provides efficiency benefits with no downsides b) Provides both efficiency (resource sharing) and vulnerability (failure propagation) c) Should be eliminated entirely to prevent cascading failures d) Was caused by excess redundancy overloading the system

Q6. The Irish potato famine is an example of the failure of:

a) Duplication -- there were not enough potato fields b) Modularity -- the farms were not isolated from each other c) Diversity -- dependence on a single crop variety left the entire food system vulnerable to one pathogen d) Slack -- the harvest was not large enough to create buffer stocks

Q7. The efficiency trap works because:

a) Redundancy is expensive in normal times and its value is invisible until a crisis occurs b) Engineers are biased against redundancy c) Redundancy never provides any measurable benefit d) Efficient systems always outperform redundant systems, even during crises

Q8. Bank capital reserves are an example of:

a) Diversity -- banks hold many different types of assets b) Duplication -- banks maintain copies of their financial records c) Slack -- money held in reserve rather than being lent out to earn returns d) Modularity -- banks divide their operations into independent units

Q9. The human body's redundancy includes all of the following EXCEPT:

a) Two kidneys, when one is sufficient for healthy life b) Multiple independent DNA repair pathways c) A single highly efficient heart with no backup d) Excess lung capacity far beyond what is needed for normal breathing

Q10. Taleb's concept of antifragility describes systems that:

a) Are immune to all forms of stress and disruption b) Maintain their current state regardless of external conditions c) Actually improve under stress, gaining strength or capability from exposure to shocks d) Break down gradually rather than suddenly

Q11. Which type of redundancy protects specifically against common-mode failure (a single cause that affects all backup copies)?

a) Duplication b) Diversity c) Slack d) None of the above

Q12. Graceful degradation means:

a) The system fails completely but in a predictable way b) The system loses some functionality under stress but continues operating at reduced capacity c) The system degrades slowly over its entire lifetime d) Components fail gracefully, meaning they give warning before failure

Q13. The "Miracle on the Hudson" (US Airways Flight 1549) is best understood as:

a) A miracle that could not have been predicted by engineering b) The result of a single pilot's exceptional skill overcoming a design flaw c) The product of a design philosophy that treats redundancy as the primary defense against catastrophe d) Evidence that modern aircraft have too much redundancy

Q14. The chapter argues that competitive pressure systematically:

a) Drives systems toward optimal redundancy levels b) Drives systems toward dangerous efficiency by rewarding redundancy cuts in the short term c) Has no effect on system redundancy d) Drives systems toward excessive redundancy because failure is so costly

Q15. Which of the following is NOT one of the five design principles for resilience proposed in Section 17.11?

a) Identify single points of failure b) Match redundancy to risk c) Eliminate all buffers to maximize efficiency d) Protect the buffers from efficiency pressure

Q16. The chapter's threshold concept -- "Redundancy Is Not Waste" -- requires the shift from:

a) Seeing redundancy as a luxury to seeing it as a necessity in all cases b) Seeing redundancy as inefficiency to seeing it as insurance against uncertain futures c) Believing all systems should be maximally redundant d) Thinking about efficiency at all

Q17. The semiconductor shortage of 2020-2023 was primarily caused by:

a) A sudden increase in demand with no supply-side factors b) Supply chains engineered to run with zero slack, making them unable to absorb any disruption c) Too much redundancy in the semiconductor manufacturing process d) A natural disaster that destroyed all semiconductor factories simultaneously

Q18. According to the chapter, which system designer has the most reliable approach to the redundancy-efficiency tradeoff?

a) MBA-trained efficiency consultants b) Four billion years of biological evolution c) Government regulators d) Computer algorithm designers

Q19. The chapter argues that the deepest danger zone for the efficiency trap is:

a) Environments where disruptions are frequent and minor b) Environments where disruptions are rare enough that people forget about them and catastrophic enough that systems cannot survive them c) Environments with no competitive pressure d) Environments where all risks are well understood and quantified

Q20. The connection between the redundancy-efficiency tradeoff and "skin in the game" (previewed in Section 17.12) is:

a) When decision-makers bear the consequences of failure, they tend to invest more in redundancy b) Redundancy only matters for people who have personal financial stakes c) Skin in the game eliminates the need for redundancy d) The concepts are unrelated

Short Answer

Q21. In two to three sentences, explain why the genetic code's redundancy (degeneracy) is not random but structured to minimize the consequences of the most common types of mutations.

Q22. Describe the four types of redundancy (duplication, diversity, modularity, slack) and give one example of each from a domain not discussed in the chapter.

Q23. Explain in your own words why the redundancy-efficiency tradeoff cannot be eliminated entirely. What structural feature of the tradeoff makes it inescapable?

Q24. The chapter argues that "efficiency is visible and redundancy is invisible." Explain what this means and why it creates a systematic bias in organizational decision-making.

Q25. Name two forward connections mentioned in the chapter. What future chapters are referenced, and what concepts from Chapter 17 will they build upon?

Answer Key

Multiple Choice:

Q1: b -- Redundancy and efficiency compete for the same resources; by definition, resources allocated to backup are not available for current production. (Section 17.10)

Q2: c -- Three independent hydraulic systems, each capable of controlling the aircraft, providing protection against common-mode failure. (Section 17.1)

Q3: c -- Degeneracy means multiple codons encode the same amino acid, creating an error-correcting buffer against point mutations. (Section 17.2)

Q4: c -- The 2011 earthquake and tsunami disrupted Toyota's just-in-time supply chain, and COVID-19 later exposed the same fragility across all industries. (Section 17.3)

Q5: b -- Interconnection provides both the efficiency of resource sharing and the vulnerability of failure propagation. (Section 17.4)

Q6: c -- The Irish potato famine resulted from dependence on a single variety (the Irish Lumper), a failure of diversity. (Section 17.4)

Q7: a -- Redundancy costs money every quarter but only pays off during rare crises, creating a systematic bias toward cutting it. (Section 17.5)

Q8: c -- Capital reserves are money held back from productive use as a buffer against unexpected losses. (Section 17.5)

Q9: c -- The heart is indeed a single organ without a backup, which is why heart failure is so dangerous. The other examples are genuine redundancies. (Section 17.6)

Q10: c -- Antifragile systems gain from stress, unlike fragile (harmed by stress) or robust (unaffected by stress) systems. (Section 17.8)

Q11: b -- Diversity uses different implementations of the same function, protecting against threats that would affect all identical copies simultaneously. (Section 17.7)

Q12: b -- Graceful degradation means the system continues operating at reduced capacity rather than failing completely. (Section 17.7)

Q13: c -- The survival was the product of decades of redundancy-focused aviation engineering, not a miracle. (Section 17.1)

Q14: b -- Competitive pressure rewards managers who cut costs (including redundancy) in the short term, systematically driving systems toward fragility. (Section 17.5)

Q15: c -- The chapter advocates the opposite: maintaining buffers and protecting them from efficiency pressure. (Section 17.11)

Q16: b -- The threshold concept is the shift from viewing redundancy as waste to viewing it as insurance against an uncertain future. (Section 17.9)

Q17: b -- The shortage resulted from supply chains with zero slack, making them unable to absorb the combined shocks of the pandemic, drought, and factory fires. (Section 17.5)

Q18: b -- Evolution has had four billion years to optimize the tradeoff and consistently invests more in redundancy than human engineers. (Section 17.6)

Q19: b -- The most dangerous zone is where disruptions are rare enough to be forgotten but catastrophic enough to destroy the system. (Section 17.10)

Q20: a -- When decision-makers bear the consequences of failure (like pilots), they value redundancy. When they do not (like consultants), they favor efficiency. (Section 17.12)

Short Answer Rubric:

Q21: The genetic code's degeneracy is structured so that the most common type of mutation -- a single-base change -- either leaves the amino acid unchanged (because the mutated codon still codes for the same amino acid) or changes it to a chemically similar amino acid (because neighboring codons tend to encode similar amino acids). This means the most frequent errors have the least harmful consequences, which is the hallmark of a well-designed error-correcting code.

Q22: The four types are: (1) Duplication -- having two or more copies of the same component (e.g., a backup hard drive); (2) Diversity -- having multiple different implementations of the same function (e.g., both gas and electric heating); (3) Modularity -- dividing the system into independent sections so failure does not propagate (e.g., fire doors in a building); (4) Slack -- unused capacity held in reserve (e.g., a cash emergency fund). Any reasonable novel examples are acceptable.

Q23: The tradeoff is inescapable because efficiency means using minimum resources for current conditions, while resilience means having resources available for unexpected conditions. These are definitionally in competition: resources devoted to handling the unexpected are, from the efficiency perspective, idle resources. You can manage the tradeoff more intelligently, but you cannot eliminate it.

Q24: The cost of redundancy appears on every quarterly expense report as a visible line item. The value of redundancy -- the disasters it prevents -- is invisible because the disasters did not happen. This creates a bias because managers who cut redundancy are immediately rewarded with better cost metrics, while the cost of lost resilience only becomes apparent when a crisis eventually arrives, which may be years or decades later.

Q25: Forward connections include Chapter 18 (Cascading Failures -- the power grid story sets up the analysis of how failure propagates through tightly coupled systems) and Chapter 34 (Skin in the Game -- the insight that decision-makers who bear the consequences of failure invest more in redundancy). Any two of the forward connections mentioned in the chapter are acceptable.