How many autoland failures occur before the system becomes manually controlled?

• A. One
• B. Two
• C. Three
• D. Four

Answer: (B)

Autoland relies on multiple redundant channels and fault-detection logic, so it can stay engaged as long as the number of independent failures within the autoland system stays within what the design can tolerate. When the fault count reaches the limit of that tolerance, automatic control can no longer be guaranteed, and the system disengages, handing manual control to the pilots. This safety design is what makes the scenario described—manual control taking over after enough autoland faults—the correct one. The other possibilities would imply the system could remain automatic beyond its safe operating limits, which isn’t how autoland reliability is structured. Pilots should be ready to take over if autoland cannot guarantee a safe landing due to accumulated faults.