In an Autoland system incorporating 3 autopilots, the maximum number of autopilot failures that may be sustained without losing Autoland capability is:

• A. 0
• B. 1
• C. 2
• D. 3

Answer: (B)

Autoland uses multiple autopilot channels to provide redundancy and cross-checks. With three autopilots, the system is designed so that it can still operate if one channel fails, because two channels remain to provide the necessary guidance and control during the approach and landing. If two autopilots fail, only one remains, which is not enough to guarantee a safe autonomous landing. Therefore, the maximum number of autopilot failures that can be sustained without losing Autoland capability is one.