Sustainability, Governance and Future Mobility

Introduction and Context

Automotive technology is no longer assessed only by vehicle performance, cost, reliability, and safety. A contemporary vehicle is part of a larger socio-technical system that includes mineral extraction, component manufacture, software, energy supply, roads, data networks, repair businesses, recycling systems, regulators, and users. Decisions made during vehicle design can therefore produce environmental and social consequences across decades and across national boundaries.

Sustainability in automotive engineering means meeting present mobility needs without undermining the ecological, economic, and social conditions required by future generations. Governance provides the rules, institutions, processes, and accountability mechanisms through which mobility systems are directed. Future mobility includes electrification, automated driving, connected infrastructure, shared transport, digital twins, and alternative fuels. These developments create opportunities, but they also introduce new risks involving cybersecurity, privacy, employment, safety responsibility, material supply, and unequal access.

The automotive technologist must consequently think in systems. A technically efficient vehicle may still be unsustainable if its battery materials are irresponsibly sourced, its software cannot be updated securely, its components cannot be repaired, or its end-of-life materials are lost. This chapter examines these interdependent issues and develops a framework for responsible engineering decisions.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain sustainability, governance, professional ethics, and product liability in automotive practice.
2. Assess vehicle impacts using lifecycle thinking and lifecycle-emissions analysis.
3. Describe circular-economy strategies, repairability, remanufacturing, and recycling.
4. Interpret the regulatory and ethical challenges of connected and automated vehicles.
5. Explain the roles of smart infrastructure and digital twins.
6. Compare future propulsion pathways using technical, environmental, economic, and social criteria.
7. Integrate these ideas in an applied mobility case study.

1. Sustainability as a Systems Property

1.1 The three dimensions of sustainability

Sustainability is commonly analysed through three interacting dimensions:

• Environmental sustainability: greenhouse-gas emissions, air quality, noise, land use, biodiversity, water consumption, and resource depletion.
• Economic sustainability: affordability, business viability, total cost of ownership, resilience of supply chains, and long-term infrastructure costs.
• Social sustainability: safety, accessibility, labour conditions, human rights, privacy, inclusion, and distribution of benefits and burdens.

These dimensions can conflict. A large battery-electric vehicle may reduce local exhaust emissions but consume more raw materials and embodied energy than a small vehicle. Autonomous taxis may improve access for some users while displacing driving occupations or increasing total travel. Good engineering therefore requires explicit trade-off analysis rather than a claim that one technology is universally sustainable.

1.2 Lifecycle thinking

A vehicle lifecycle includes raw-material extraction, material processing, component manufacture, vehicle assembly, logistics, use, maintenance, reuse, and end-of-life treatment. Lifecycle assessment (LCA) compares environmental impacts over a defined functional unit, such as one passenger-kilometre or one vehicle-kilometre.

A simplified lifecycle greenhouse-gas model is:

Here, E_total is total lifecycle emissions, usually measured in kg CO₂-equivalent; the component terms represent emissions from each stage; and E_credits represents verified avoided emissions from material recovery, component reuse, or exported energy. The equation is a system boundary model, not a universal physical law. Results depend on vehicle lifetime, electricity mix, production methods, allocation rules, recycling assumptions, and driving conditions.

For a vehicle using electricity, a simplified use-phase estimate is:

where d is lifetime distance in km, e is electricity consumption in kWh/km, and I_grid is grid intensity in kg CO₂e/kWh. This expression excludes manufacturing and should not be mistaken for a complete LCA. It assumes that average electricity intensity is an appropriate representation of charging electricity and that consumption is measured consistently, including or excluding charging losses.

For a combustion vehicle, a basic operational estimate is:

where f is fuel consumption in litres/km and EF is the fuel emission factor in kg CO₂e/litre. Real assessments may also include upstream fuel production, methane leakage, non-exhaust particles, cold starts, and local pollutants.

Worked example: comparing use-phase emissions

Assume an electric vehicle travels 180,000 km, consumes 0.18 kWh/km, and charges from electricity with an intensity of 0.40 kg CO₂e/kWh. Its use-phase emissions are:

E_use = 180,000 × 0.18 × 0.40 = 12,960 kg CO₂e

or 12.96 tonnes CO₂e.

Assume a petrol vehicle travels the same distance, consumes 6.5 L/100 km, and uses an operational factor of 2.31 kg CO₂e/L. Converting consumption gives f = 6.5 ÷ 100 = 0.065 L/km:

E_use = 180,000 × 0.065 × 2.31 = 27,027 kg CO₂e

or approximately 27.0 tonnes CO₂e. This comparison is only for the stated use phase. A complete comparison must add manufacturing, battery production, maintenance, recycling, and changes in electricity intensity over time.

2. Governance, Regulation, and Professional Ethics

2.1 Governance in automotive systems

Governance extends beyond legislation. It includes standards, corporate policies, professional codes, procurement rules, certification, audits, data stewardship, public consultation, and enforcement. Effective governance answers five questions:

1. Who has authority to make a decision?
2. What evidence and safety case are required?
3. Who is accountable when a system fails?
4. How can affected people challenge or report decisions?
5. How are performance and compliance monitored over time?

Automotive regulation commonly addresses vehicle type approval, functional safety, emissions, noise, cybersecurity, software updates, consumer protection, battery transport, hazardous materials, accessibility, and data protection. Requirements differ by jurisdiction, so engineers must identify the applicable legal framework before design release. International technical regulations and standards may support harmonisation, but a voluntary standard does not automatically replace a legal obligation.

2.2 Professional ethics

Professional ethics requires more than obeying minimum law. Engineers have duties to protect the public, communicate uncertainty, maintain competence, avoid conflicts of interest, preserve confidentiality appropriately, and report unsafe conditions. A useful ethical decision process is:

1. Identify stakeholders and foreseeable harms.
2. Separate facts, assumptions, and value judgments.
3. Identify legal, professional, and organisational duties.
4. Generate alternatives, including stopping or redesigning the project.
5. Evaluate severity, likelihood, reversibility, and distribution of harm.
6. Document the reasoning and obtain independent review.
7. Monitor outcomes and revise the decision when evidence changes.

For automated driving, ethical analysis must not be reduced to a thought experiment about choosing between individuals. More practical issues include safe system limitations, truthful marketing, driver monitoring, accessibility, bias in perception data, emergency behaviour, and whether a human can realistically resume control after prolonged automation.

2.3 Product liability and accountability

Product liability can arise when a product is defective in design, manufacture, warning, instructions, or software-related operation, depending on the applicable legal system. Four technical practices are particularly important:

• Requirements traceability: connect safety and performance requirements to design decisions and verification evidence.
• Configuration management: identify the exact hardware, software, calibration, and data version in a vehicle.
• Hazard analysis: identify hazardous situations, causes, controls, and residual risk.
• Post-market surveillance: collect field data, investigate incidents, and implement recalls or updates when necessary.

A manufacturer cannot transfer all responsibility to a user through a warning that contradicts ordinary use. Conversely, operators, repairers, fleet managers, and users may also have duties when they modify, maintain, or deploy a system improperly. Responsibility should therefore be assigned across the whole operational system, with clear interfaces and escalation procedures.

3. Circular Economy, Repairability, and Recycling

3.1 From linear to circular production

A linear automotive model extracts materials, manufactures products, uses them, and disposes of them. A circular economy aims to retain product, component, and material value for as long as possible. The preferred hierarchy is generally:

1. Reduce material and energy demand.
2. Extend product life through durability and maintenance.
3. Repair and upgrade products.
4. Reuse components.
5. Remanufacture components to controlled specifications.
6. Recycle materials.
7. Recover energy or dispose of residual waste only when higher-value options are impractical.

Recycling is therefore important but is not the first circular strategy. Recycling a component destroys much of the energy and engineering value invested in its manufacture, whereas repair or remanufacture may preserve that value.

3.2 Design for repairability

Repairability is influenced by fastener selection, access, diagnostic information, modularity, replaceable wear parts, software support, calibration procedures, spare-parts availability, and safe isolation of high-voltage systems. A vehicle may be physically repairable but practically unrepairable if proprietary diagnostic tools, authentication, or software licences prevent independent service.

Designers should assess:

• time and tools required for common repairs;
• risk of damage during disassembly;
• availability and cost of parts;
• battery and electronic-module replaceability;
• protection against incorrect assembly;
• access to service information;
• cybersecurity implications of repair access; and
• expected software-support duration.

Repairability can conflict with sealing, lightweight construction, crash integrity, tamper resistance, and manufacturing cost. The correct objective is not maximum disassembly in every case, but safe, economical, and environmentally beneficial maintenance over the intended life.

3.3 Batteries and material recovery

Electric-vehicle batteries contain valuable materials and may retain useful capacity after vehicle retirement. Safe handling requires identification, isolation, state-of-charge control, protection against short circuits, and trained personnel. Second-life use in stationary storage may be feasible, but it is not automatically sustainable: transport, testing, repackaging, safety systems, and eventual recycling must be included in the assessment.

Battery recycling routes may involve mechanical separation, pyrometallurgical processing, hydrometallurgical recovery, or combinations of these. Their performance depends on chemistry, pack design, contamination, recovery efficiency, energy use, and the quality of recovered materials. Engineers should design battery packs with labelling, accessible service disconnects, replaceable modules where safe, and documented end-of-life procedures.

4. Connected Vehicles, Data, and Digital Twins

4.1 Smart infrastructure

Smart infrastructure combines physical assets with sensing, communications, computation, and control. Examples include adaptive traffic signals, connected charging stations, road-weather sensors, fleet-management platforms, parking systems, and vehicle-to-infrastructure communication.

Benefits may include reduced congestion, improved public transport priority, predictive maintenance, safer speed management, and more efficient charging. Risks include cyberattack, surveillance, network failure, vendor dependence, digital exclusion, and incorrect automated decisions. Infrastructure should therefore be designed with fail-safe or degraded modes, redundancy for safety-critical functions, secure authentication, controlled access, logging, and clear ownership of data.

4.2 Digital twins

A digital twin is a maintained digital representation of a physical asset or system, linked through data over its lifecycle. It is more than a static computer-aided design model. A useful twin may contain configuration, sensor data, maintenance history, simulation models, and operational state.

In automotive engineering, digital twins can support:

• virtual commissioning of manufacturing equipment;
• battery thermal and ageing estimation;
• predictive maintenance;
• fleet energy optimisation;
• collision or durability analysis;
• recall targeting; and
• lifecycle carbon accounting.

A twin is only as reliable as its sensors, models, data quality, and update process. Model outputs should be accompanied by uncertainty and validity limits. A digital twin should not be used to justify a safety decision outside the conditions for which it has been validated.

Figure: A digital twin creates a lifecycle feedback loop, but decisions still require validated models and professional judgement.

4.3 Cybersecurity and privacy

Connected vehicles are potential cyber-physical systems. Threats include unauthorised access, ransomware, manipulation of sensor data, denial of service, theft of personal information, and unsafe software updates. Security engineering should include threat modelling, secure boot, signed updates, least-privilege access, network segmentation, vulnerability disclosure, incident response, and update rollback where appropriate.

Location, driving style, biometric information, and vehicle identifiers may be personal data. Collection should have a defined purpose, proportionality, retention limits, access controls, and transparent user communication. Anonymisation is not always permanent because datasets can sometimes be re-identified by combining them with other information.

5. Autonomous Mobility and Its Governance

Automation is usefully described by levels of driving responsibility, from no automation to systems capable of performing the complete driving task within a defined operational design domain (ODD). The ODD may specify roads, weather, speed, geography, traffic conditions, and time of operation.

The most important engineering distinction is between:

• system capability: what the system can do under tested conditions;
• system authority: what the system is permitted to control; and
• user responsibility: what the human or operator must monitor or perform.

Overstating capability can cause misuse. Human-machine interfaces must communicate system state, limitations, attention requirements, and transition demands. A handover request is not a complete safety strategy if the driver is distracted, asleep, impaired, or physically unable to respond.

Validation should combine simulation, closed-course testing, controlled public-road trials, scenario-based testing, fault injection, cybersecurity assessment, and operational monitoring. Rare but severe events are difficult to establish through ordinary mileage alone. Safety arguments should therefore include edge cases, uncertainty, and evidence that the system fails safely when sensors, maps, communications, or actuators become unavailable.

Autonomous mobility also raises governance questions: who approves expansion of the ODD, who investigates incidents, how are software changes certified, and how are pedestrians, cyclists, children, and people with disabilities represented in testing data? A responsible deployment plan includes independent oversight, transparent incident reporting, accessible complaint mechanisms, and a process for suspending operation when risk exceeds approved limits.

6. Future Propulsion Pathways

Battery-electric vehicles

Battery-electric propulsion offers high drivetrain efficiency, zero tailpipe emissions, regenerative braking, and compatibility with renewable electricity. Constraints include battery mass, charging time, mineral supply, cold-weather performance, charging access, grid capacity, and battery degradation. Environmental advantage depends on manufacturing emissions, electricity generation, vehicle size, lifetime, and end-of-life management.

Hydrogen fuel-cell vehicles

Fuel cells convert hydrogen and oxygen into electricity, with water as the principal tailpipe product. They may support long range and rapid refuelling, particularly in some heavy-duty applications. However, overall energy efficiency, hydrogen production, storage, distribution, stack durability, and infrastructure cost are significant concerns. Hydrogen is not inherently low-carbon; its climate performance depends on production pathway and leakage control.

Sustainable liquid fuels

Advanced biofuels and synthetic e-fuels can be useful where direct electrification is difficult, such as aviation-derived technologies, legacy fleets, or certain high-duty-cycle applications. Their sustainability depends on feedstock, land use, production energy, lifecycle emissions, combustion pollutants, and competition with other uses. They should not be assumed to provide unlimited supply.

Hybrid and efficient combustion systems

Hybridisation can reduce fuel use through engine downsizing, regenerative braking, and operation nearer efficient load points. It may be a transitional or application-specific solution, but it retains combustion emissions and requires additional materials and systems. Across all propulsion types, reducing vehicle mass, improving aerodynamics, right-sizing vehicles, and reducing unnecessary travel may deliver benefits before selecting a powertrain.

7. Integrated Case Study: Illustrative Regional Mobility Programme

Background

A fictional regional authority serves a city, industrial zone, and rural communities. It proposes battery-electric buses, autonomous shuttles near a railway station, smart charging, and a digital twin of its fleet. The programme promises lower emissions and better access but faces limited grid capacity, public concern about surveillance, and a shortage of high-voltage technicians.

Problem

The authority initially evaluates proposals using purchase price and tailpipe emissions only. This risks selecting large batteries, underestimating infrastructure impacts, neglecting repairability, and deploying automation before governance is mature.

Analysis

An interdisciplinary team defines functional units of passenger-kilometre and vehicle-year. It compares vehicle manufacture, electricity, maintenance, battery replacement, training, infrastructure, and end-of-life pathways. It also maps stakeholders: passengers, pedestrians, drivers, disabled users, residents, operators, emergency services, repair businesses, electricity suppliers, and data-protection authorities.

The team identifies the following risks:

• charging peaks could overload the local transformer;
• autonomous shuttles might fail in heavy rain or temporary roadworks;
• location data could reveal sensitive travel patterns;
• inaccessible interfaces could exclude disabled passengers;
• imported batteries might lack traceability of mineral sourcing;
• insufficient training could expose technicians to high-voltage hazards; and
• a proprietary platform could prevent future repair or supplier change.

Approach and solution

The authority adopts a staged programme. First, it reduces service frequency inefficiencies, improves conventional bus utilisation, and introduces electric buses on predictable routes. Depot charging is managed to avoid peak demand, with renewable procurement assessed through additionality and credible accounting rather than unsupported claims.

Second, autonomous shuttles operate only within a restricted ODD, with a remote supervisor, trained local staff, accessible manual assistance, and predefined suspension conditions. The authority requires event logs, cybersecurity controls, independent safety review, and public reporting of incidents.

Third, procurement contracts require battery health data, spare parts, diagnostic access, software-support periods, repair documentation, take-back provisions, and auditable environmental and labour information. A digital twin combines fleet configuration, energy use, maintenance history, and battery state estimates. It is used for planning and maintenance, not as a substitute for physical inspection or legal certification.

Outcome

The programme delivers lower operational emissions and more reliable maintenance, but the most important outcome is improved decision quality. The authority discovers that smaller vehicles with better scheduling serve many routes more sustainably than maximum-range vehicles. It also establishes a data-governance board and a technician training pathway. Some autonomous routes are postponed because evidence is insufficient under severe weather conditions.

Learning points

The case demonstrates that sustainability is not a single technology choice. It depends on service design, vehicle sizing, energy supply, procurement, repair capability, data governance, workforce development, and continuous evaluation. It also illustrates that delaying a deployment can be a technically responsible decision when the safety case is incomplete.

8. Implementation Framework for Automotive Professionals

A practical sustainability and governance review can follow this sequence:

1. Define the service: identify the mobility need, users, distance, capacity, and operating conditions.
2. Set the system boundary: include energy, infrastructure, manufacture, maintenance, software, workforce, and end-of-life effects.
3. Identify legal obligations: determine applicable approval, safety, environmental, data, cybersecurity, and consumer rules.
4. Map stakeholders and harms: include vulnerable and indirectly affected groups.
5. Compare alternatives: use lifecycle, total-cost, safety, resilience, and accessibility criteria.
6. Design for life extension: provide diagnostics, repair routes, spare parts, upgrades, and safe recycling.
7. Verify and document: maintain traceability, test evidence, assumptions, uncertainties, and change control.
8. Monitor in service: use field data, audits, incident reporting, and corrective action.
9. Review equity and unintended effects: assess who benefits, who bears costs, and whether access is fair.

Decision matrices can support comparison, but weighted scores do not eliminate value judgments. The weights should be transparent, justified, and tested for sensitivity. A high score produced by arbitrary weights is not evidence of sustainability.

Challenges and Limitations

Lifecycle estimates can vary substantially because of uncertain battery lifetimes, future electricity mixes, recycling yields, allocation methods, and rebound effects. A more efficient vehicle may reduce cost per kilometre and encourage additional travel, offsetting some benefits. Digital systems can improve efficiency while increasing energy demand and surveillance. Automation may reduce crashes in one operating domain but create new failure modes at system boundaries. Finally, global supply chains make it difficult to verify labour and environmental conditions beyond direct suppliers.

Sustainability claims should therefore state assumptions, data quality, uncertainty, system boundaries, and comparison baselines. Engineers should avoid absolute claims such as “zero impact” or “fully sustainable.” Responsible communication distinguishes measured results from forecasts and marketing language.

Contemporary Developments and Employability

Automotive professionals increasingly need competence in battery safety, high-voltage systems, software lifecycle management, data governance, cybersecurity, carbon accounting, sustainable procurement, and systems engineering. Employers value technicians and engineers who can communicate across mechanical, electrical, software, environmental, legal, and operational disciplines.

Emerging developments include vehicle-to-grid operation, solid-state and sodium-ion batteries, battery passports, low-carbon materials, automated freight, mobility-as-a-service, cooperative perception, software-defined vehicles, and AI-assisted design and diagnostics. Each development should be assessed by evidence rather than novelty. AI can help detect anomalies, optimise routes, and generate design alternatives, but its outputs require validation, explainability appropriate to the risk, protection of proprietary and personal data, and human accountability.

Chapter Summary

Sustainable automotive technology requires lifecycle and systems thinking. Environmental, economic, and social effects occur from material extraction through manufacturing, operation, repair, reuse, and recycling. Lifecycle emissions can be estimated using clearly defined system boundaries, but results depend on assumptions such as vehicle lifetime, energy intensity, and recycling treatment.

Governance combines law, standards, organisational controls, professional ethics, evidence, and accountability. Product liability makes traceability, hazard analysis, configuration management, cybersecurity, and post-market surveillance essential. Circular-economy practice prioritises durability, repair, reuse, and remanufacturing before recycling, while battery systems require safe handling and planned recovery.

Connected and autonomous mobility can improve safety and efficiency, but only when operational limits, human responsibilities, privacy, cybersecurity, accessibility, and incident governance are explicit. Smart infrastructure and digital twins support optimisation but do not replace physical verification or professional judgement. Future propulsion choices must be evaluated against application, lifecycle impacts, infrastructure, resource use, and social consequences. The central professional principle is to integrate technical performance with public safety, environmental responsibility, fairness, and transparent evidence.

Key Terms

Circular economy: An economic model that retains products, components, and materials at their highest practical value.

Digital twin: A maintained digital representation of a physical asset linked to lifecycle data.

Governance: The rules, responsibilities, processes, and institutions used to direct and control a system.

Lifecycle assessment: A systematic evaluation of environmental impacts across defined stages of a product or service.

Lifecycle emissions: Total greenhouse-gas emissions associated with a product across its defined lifecycle.

Operational design domain: The conditions within which an automated-driving system is designed to function.

Product liability: Legal responsibility for harm caused by a defective or inadequately controlled product.

Professional ethics: Principles governing responsible conduct, judgement, competence, and protection of the public.

Repairability: The practical ease, safety, cost, and availability of restoring a product to working condition.

Remanufacturing: Returning a used component to a controlled condition meeting specified performance requirements.

Smart infrastructure: Physical infrastructure enhanced with sensing, communication, computation, and control.

System boundary: The defined set of processes and impacts included in an analysis.

Traceability: The ability to connect requirements, parts, software, decisions, tests, and field outcomes.

Vehicle-to-grid: Controlled exchange of electricity between vehicles and the electrical grid.

Cybersecurity: Protection of digital systems, networks, data, and control functions from unauthorised or harmful activity.

Functional unit: The quantified service used as a basis for comparing lifecycle impacts.

High-voltage safety: Procedures and design controls that prevent electrical shock, arcing, fire, and unintended energisation.

Autonomous mobility: Transport in which some or all driving or navigation functions are performed by automated systems.

Review Questions

Short Answer Questions

1. What are the environmental, economic, and social dimensions of sustainability?
2. Why is repair generally preferred to recycling in a circular-economy hierarchy?
3. Define an operational design domain.
4. State two professional duties relevant to automotive engineers.
5. Why must a digital twin be validated against physical evidence?

Long Answer Questions

1. Explain how lifecycle thinking changes the comparison between battery-electric and combustion vehicles.
2. Discuss the relationship between product liability, requirements traceability, and post-market surveillance.
3. Describe design strategies that improve the repairability and recyclability of electric vehicles.
4. Evaluate the governance requirements for deploying autonomous shuttles in a public environment.
5. Compare battery-electric, hydrogen fuel-cell, sustainable-fuel, and hybrid propulsion pathways for different applications.

Analytical / Application Questions

1. A fleet operator is choosing between a large-range electric bus and a smaller bus with more frequent charging. Develop a decision framework including emissions, infrastructure, accessibility, reliability, repairability, and total cost.
2. A connected vehicle fleet records detailed location data for predictive maintenance. Identify the technical, ethical, and governance controls required before deployment.
3. Using the lifecycle equations in this chapter, explain which additional data are needed to compare two vehicles fairly when their manufacturing emissions, electricity sources, lifetimes, and recycling pathways differ.

Multiple Choice Questions with Answers

Question 1

Which statement best describes lifecycle assessment in automotive engineering?

A. It measures only tailpipe emissions during vehicle operation.

B. It evaluates impacts across defined lifecycle stages and a stated system boundary.

C. It calculates only the purchase price and maintenance cost.

D. It proves that one propulsion technology has no environmental impact.

Correct Answer: B. It evaluates impacts across defined lifecycle stages and a stated system boundary.

Question 2

In the simplified electric-vehicle use-phase equation E_use = d × e × I_grid, what does I_grid represent?

A. Vehicle mass in kilograms

B. Distance travelled in kilometres

C. Grid electricity emissions intensity

D. Battery capacity in kilowatt-hours

Correct Answer: C. Grid electricity emissions intensity

Question 3

Which option is normally higher in the circular-economy hierarchy than recycling?

A. Disposal in landfill

B. Energy recovery

C. Repair and continued use

D. Uncontrolled export of waste

Correct Answer: C. Repair and continued use

Question 4

What is the main purpose of an operational design domain?

A. To specify the conditions in which an automated system is designed to operate

B. To determine the retail price of a vehicle

C. To identify the vehicle paint colour

D. To replace all physical testing

Correct Answer: A. To specify the conditions in which an automated system is designed to operate

Question 5

Which practice most directly supports software and product accountability?

A. Deleting earlier design records

B. Requirements and configuration traceability

C. Allowing uncontrolled aftermarket modifications

D. Avoiding post-market monitoring

Correct Answer: B. Requirements and configuration traceability

Question 6

Why can a digital twin not automatically replace physical inspection?

A. Digital models cannot store historical data.

B. Its outputs depend on data quality, model validity, and stated operating limits.

C. Physical vehicles do not generate sensor data.

D. Digital twins are used only for marketing.

Correct Answer: B. Its outputs depend on data quality, model validity, and stated operating limits.

Question 7

An electric vehicle travels 100,000 km at 0.20 kWh/km using electricity at 0.50 kg CO₂e/kWh. What are its simplified use-phase emissions?

A. 1,000 kg CO₂e

B. 10,000 kg CO₂e

C. 20,000 kg CO₂e

D. 100,000 kg CO₂e

Correct Answer: B. 10,000 kg CO₂e

Question 8

Which is a significant cybersecurity control for connected vehicles?

A. Unsigned software updates from any source

B. Shared administrative passwords

C. Secure authentication and signed updates

D. Removing all event logs

Correct Answer: C. Secure authentication and signed updates

Question 9

Why is hydrogen not automatically a low-carbon propulsion option?

A. Hydrogen cannot be stored.

B. Its lifecycle emissions depend on how it is produced and distributed.

C. Fuel cells always emit large quantities of carbon dioxide at the tailpipe.

D. Hydrogen vehicles cannot use electric motors.

Correct Answer: B. Its lifecycle emissions depend on how it is produced and distributed.

Question 10

Which statement best expresses professional responsibility in an uncertain safety case?

A. Deploy immediately because innovation is always beneficial.

B. Hide uncertainty to avoid public concern.

C. Document assumptions, seek independent review, and restrict or delay deployment when evidence is insufficient.

D. Transfer all responsibility to the vehicle user.

Correct Answer: C. Document assumptions, seek independent review, and restrict or delay deployment when evidence is insufficient.