Chapter 18 Quiz: Self-Assessment

Instructions: Answer each question without looking back at the chapter. After completing all questions, check your answers against the key at the bottom. If you score below 70%, revisit the relevant sections before moving on to Chapter 19.

Multiple Choice

Q1. A cascading failure is best defined as:

a) Any failure of a large system b) A process in which a small, local failure propagates through interconnections, amplifying at each step, producing consequences disproportionate to the initial trigger c) A failure caused by poor maintenance or operator error d) A failure that occurs simultaneously in multiple independent systems by coincidence

Q2. The 2003 Northeast blackout was initiated by:

a) A cyberattack on the power grid's control systems b) A massive surge in electricity demand that exceeded all generating capacity c) A transmission line contacting untrimmed trees in Ohio, combined with a software bug that disabled control room alarms d) A simultaneous failure of multiple power plants due to equipment age

Q3. In the 2008 financial crisis, the cascade was amplified by:

a) A single bank failing with no connections to other institutions b) Two interlocking positive feedback loops: fire-sale spirals and trust spirals c) Government regulators deliberately shutting down banks d) A natural disaster that destroyed financial infrastructure

Q4. The Yellowstone trophic cascade demonstrated that:

a) Wolves had no significant effect on the Yellowstone ecosystem b) Removing a single apex predator cascaded through the food web, changing elk behavior, vegetation, and even the physical course of rivers c) Adding wolves to an ecosystem always improves its health d) Ecosystem cascades only affect the species directly connected to the removed species

Q5. In sepsis, the cascading failure is driven by:

a) The pathogen itself overwhelming the body's defenses b) A failure of the body's immune system to activate c) The body's own immune response, which escalates beyond control and damages healthy organs d) Environmental toxins that suppress immune function

Q6. According to Charles Perrow's Normal Accidents theory, cascading failures are inevitable in systems that are:

a) Large and expensive b) Tightly coupled AND interactively complex c) Loosely coupled and linearly complex d) Any system operated by humans, because humans always make errors

Q7. In Perrow's framework, "tight coupling" means:

a) Components are physically close together b) Components are connected with little buffer or slack, so a change in one immediately affects others c) Components are all made by the same manufacturer d) Components communicate using the same protocols

Q8. The Swiss cheese model (James Reason) describes catastrophic failure as occurring when:

a) A single layer of defense fails completely b) The weaknesses (holes) in multiple independent layers of defense happen to align simultaneously, allowing failure to pass through all layers c) Swiss engineers make design errors d) Random component failures exceed a numerical threshold

Q9. Scale-free networks are characterized by:

a) All nodes having the same number of connections b) A few highly connected hubs and many nodes with few connections, following a power-law distribution c) No connections between any nodes d) Connections that change randomly over time

Q10. Scale-free networks are paradoxically:

a) Equally vulnerable to all types of failure b) Robust against random node failure but fragile against hub failure c) Fragile against random failure but robust against hub failure d) Neither robust nor fragile against any type of failure

Q11. A circuit breaker, in the context of cascading failure prevention, is:

a) A physical device found only in electrical systems b) Any mechanism that detects a cascade in progress and deliberately disconnects parts of the system to contain it c) A system that prevents any failure from ever occurring d) A backup power supply that activates during outages

Q12. Stock market circuit breakers were introduced after:

a) The 2003 Northeast blackout b) The 2008 financial crisis c) The 1987 Black Monday crash d) The 2010 Flash Crash

Q13. The paradox of interconnection states that:

a) Systems should never be interconnected b) Interconnection simultaneously increases efficiency and increases vulnerability to cascading failure c) Interconnection only provides benefits with no drawbacks d) Interconnection is only useful in electrical systems

Q14. Firebreaks function as circuit breakers by:

a) Extinguishing fires directly b) Preventing the cascade of fire from one area to another by creating a gap in the propagation medium c) Alerting firefighters to the presence of fire d) Increasing the moisture content of vegetation

Q15. The Suez Canal blockage by the Ever Given demonstrated cascading failure because:

a) The ship was destroyed, causing an environmental disaster b) A single obstruction in a single chokepoint disrupted twelve percent of global trade for months, far exceeding the six-day physical blockage c) The canal permanently closed after the incident d) The blockage only affected shipping companies, with no broader economic impact

Q16. According to the chapter's threshold concept, the primary cause of a cascading failure is:

a) The initial trigger event (the tree, the bankruptcy, the ship) b) Operator error or negligence c) The system's architecture -- its coupling structure, complexity, and absence of circuit breakers d) Bad luck and random chance

Q17. Which of the following is NOT identified as a cross-domain solution to cascading failure?

a) Circuit breakers that interrupt cascade propagation b) Buffers and slack that absorb shocks c) Eliminating all interconnections between system components d) Modularity that contains failure to a local area

Q18. In the sepsis cascade, what structural feature does the human body share with the power grid that enables cascading failure?

a) Both use electricity b) Both are tightly coupled through shared pathways (blood supply / electrical connections) that transmit failure as readily as normal function c) Both were designed by the same engineers d) Both fail only due to external attack

Q19. Perrow uses the term "normal accidents" to mean:

a) Accidents that happen frequently and are considered routine b) Accidents that are inevitable structural consequences of tight coupling and interactive complexity, not anomalies c) Accidents that cause only minor damage d) Accidents caused by normal wear and tear of equipment

Q20. The chapter argues that the most effective approach to cascading failure is:

a) Preventing all possible trigger events through perfect maintenance and oversight b) Hiring better operators who will respond more quickly to failures c) Redesigning system architecture to contain inevitable failures through circuit breakers, buffers, modularity, and loose coupling at strategic interfaces d) Accepting cascading failures as completely unpreventable and taking no action

Short Answer

Q21. In one sentence, state why the initial trigger of a cascading failure is less important than the system's architecture. (2 points)

Q22. Explain why the same connections that create efficiency in a networked system also create vulnerability to cascading failure. Use a specific example. (3 points)

Q23. Describe one structural similarity and one structural difference between the 2003 power grid cascade and the 2008 financial cascade. (3 points)

Q24. A friend argues that the 2003 blackout could have been prevented simply by better tree trimming and fixing the software bug. Using Perrow's framework, explain why this response is insufficient. (3 points)

Q25. Explain why organizational silos can function as circuit breakers, and why this creates a tension with the common management advice to "break down silos." (3 points)

Answer Key

Multiple Choice:

Q1: b -- Cascading failure is defined by disproportionate propagation through interconnections, not just any large system failure.

Q2: c -- The cascade began with a line-tree contact in Ohio; the software bug in the alarm system prevented operators from responding.

Q3: b -- The fire-sale spiral (forced selling reduces prices, triggering more forced selling) and the trust spiral (bank failure reduces trust, causing credit withdrawal, causing more failures) were the two amplification mechanisms.

Q4: b -- The removal of wolves cascaded through multiple trophic levels, demonstrating how interconnected the ecosystem was.

Q5: c -- Sepsis is the body's own immune response cascading out of control, damaging healthy organs -- "the defense becomes the attack."

Q6: b -- Perrow's inevitability thesis requires both tight coupling (for propagation) and interactive complexity (for unpredictability).

Q7: b -- Tight coupling means minimal buffer between components, so failures propagate immediately.

Q8: b -- Reason's model describes layered defenses, each with imperfections, failing when imperfections align.

Q9: b -- Scale-free networks follow a power-law distribution of connections, with a few highly connected hubs.

Q10: b -- Random failures rarely hit hubs, so the network is robust; but targeted or accidental hub failures cascade through many connections.

Q11: b -- Circuit breakers are a cross-domain concept: any mechanism that detects and contains cascades by deliberate disconnection.

Q12: c -- Market circuit breakers were introduced after the October 1987 crash, when the Dow fell 22.6% in one day.

Q13: b -- Interconnection creates both efficiency and vulnerability; this paradox cannot be resolved, only managed.

Q14: b -- Firebreaks create gaps that cascading fire cannot cross, containing the fire to one area.

Q15: b -- The disproportionality between a six-day blockage and months of global disruption is the signature of cascading failure.

Q16: c -- The threshold concept holds that architecture (coupling, complexity, circuit breakers) determines cascade behavior, not the specific trigger.

Q17: c -- Eliminating all interconnections would also eliminate efficiency; the solution is strategic decoupling, not total disconnection.

Q18: b -- Both systems transmit failure through the same shared pathways that transmit normal function (bloodstream / power lines).

Q19: b -- "Normal" means structurally inevitable, not frequent or routine.

Q20: c -- The chapter argues for architectural redesign rather than prevention of triggers or resignation to fate.

Short Answer:

Q21: The trigger is less important than the architecture because in a tightly coupled system, if that specific trigger had not initiated the cascade, a different trigger eventually would have -- the architecture determines that cascades will happen, while the trigger only determines when. (2 points: 1 for stating the architecture is the root cause, 1 for explaining the inevitability of alternative triggers.)

Q22: The connections that transmit normal function (electricity flow, capital flow, trophic energy) are the same connections that transmit failure (overload current, counterparty losses, population imbalances). For example, the power grid's transmission lines carry electricity from generators to consumers under normal conditions, but carry cascading overload from failed lines to functioning lines during a cascade. The connection cannot distinguish between function and failure. (3 points: 1 for identifying the shared medium, 1 for the specific example, 1 for explaining why the connection transmits both.)

Q23: Similarity: Both cascades were driven by positive feedback loops (each failure increasing the stress on remaining components, causing more failures). Difference: The power grid cascade propagated at the speed of electricity (nine seconds for the main collapse), while the financial cascade propagated over days and weeks through human decision-making and market mechanisms. (3 points: 1 for the similarity, 1 for the difference, 1 for the explanation of the difference.)

Q24: Perrow's framework shows that the power grid is tightly coupled and interactively complex, placing it in the "normal accidents" quadrant. Better tree trimming and software fixes address specific holes in specific defense layers, but the system's architecture ensures that other triggers and other defense failures will eventually produce a cascade. Fixing individual failures in a normal-accident system is like plugging one hole in a Swiss cheese slice while ignoring that all the slices have holes: you address one specific failure path while leaving the structural conditions for cascade intact. (3 points: 1 for applying Perrow's framework, 1 for explaining the limits of trigger-focused prevention, 1 for connecting to the architectural argument.)

Q25: Organizational silos create loose coupling between departments, which means a failure in one department does not immediately propagate to others -- the silo acts as a circuit breaker. Breaking down silos increases interdepartmental coordination and efficiency (the benefits of interconnection) but also creates channels through which failures can cascade across the organization (the vulnerability of interconnection). This is the paradox of interconnection applied to organizational design: more integration means both more efficiency and more vulnerability. (3 points: 1 for explaining silos as circuit breakers, 1 for the efficiency gain of breaking silos, 1 for the cascade vulnerability created by breaking silos.)