What is defense-in-depth and how does it apply to core protection?

• A. A single-layer safety approach
• B. Only software fault checks
• C. Physical security is the sole focus
• D. Multiple overlapping safety layers ensure protection even if one layer fails; core protection is complemented by additional safety measures and human/operator actions

Answer: (D)

Defense-in-depth is the approach of using several overlapping and independent safety layers so that a failure in one element doesn’t lead to core damage. It treats safety as a cascade of protections that cover prevention, detection, and mitigation, combining design features, automatic protection systems, backup equipment, containment, procedures, training, and human actions.

In core protection, this means the core is guarded by multiple, diverse barriers and controls that work in concert. If abnormal conditions occur, the reactor protection system can automatically trip the reactor to stop the power rise. If that automatic response isn’t enough or fails, engineered safety systems provide cooling and injection as needed to keep the core covered and cooled. Containment then acts as a final barrier to limit any release. At the same time, independent instrumentation and monitoring give early indications of deviations, and trained operators follow procedures to intervene appropriately if automatic systems don’t behave as expected. The emphasis is on redundancy, diversity, and independence so that no single fault or failure mode can compromise core safety. This layered protection keeps the fuel intact and maintains safe conditions across a wide range of potential faults and accidents.