13. System Integrity and Wide-Area Protection

Introduction and Context

Power-system protection was traditionally designed around local measurements of current, voltage, frequency, and impedance. This approach remains essential, but it becomes insufficient when disturbances extend across several transmission corridors or when the sequence of events is too rapid and geographically dispersed for independent local relays to recognize the developing threat. Modern interconnected grids can experience angular instability, voltage collapse, frequency decline, uncontrolled islanding, and cascading line or generator trips. System integrity protection addresses these system-wide risks by coordinating measurements, communication, protection, control, and operating actions over a broad electrical area.

A system-integrity scheme is not simply a faster relay. It is a coordinated defence mechanism that observes a system condition, determines whether that condition threatens stability, and initiates a deliberately selected corrective action. Such actions may include generator tripping, load shedding, controlled islanding, excitation or turbine-governor modification, remedial network switching, or blocking of inappropriate protection operations.

The development of phasor measurement units (PMUs), phasor data concentrators, wide-area communication networks, and synchrophasor analytics has significantly improved the ability of system operators to observe dynamic behaviour. Conventional supervisory control and data acquisition systems typically provide measurements at relatively slow rates and with nonuniform time stamps. Synchrophasors provide synchronized voltage and current phasors, frequency, and rate of change of frequency, allowing geographically separated conditions to be compared on a common time reference.

The central engineering challenge is to exploit this information without creating unacceptable dependence on communication channels, software, or centralized decision-making. A protection action must be selective, dependable, secure, sufficiently rapid, and operationally explainable. The objective is therefore not to eliminate every disturbance, but to prevent a local fault or stressed operating condition from developing into a widespread blackout.

Learning Objectives

After studying this chapter, the reader should be able to:

1. Explain the purpose and architecture of system-integrity and wide-area protection schemes.

2. Analyse out-of-step, underfrequency, undervoltage, and islanding conditions.

3. Distinguish local, wide-area, centralized, and decentralized remedial-action schemes.

4. Interpret synchrophasor measurements and important stability indicators.

5. Formulate a coordinated defence plan against cascading failures and blackouts.

6. Evaluate communication, cybersecurity, dependability, security, and operational risks.

7. Apply wide-area protection concepts to practical disturbance scenarios.

From Local Protection to System Defence

Important terminology

A wide-area measurement system (WAMS) is an infrastructure that collects time-synchronized measurements from geographically distributed substations and power plants. A synchrophasor is a phasor measurement referenced to a common time standard, normally obtained through satellite-synchronized timing or an equivalent precise source. A phasor measurement unit (PMU) measures voltage and current phasors, frequency, and related quantities at high reporting rates.

A wide-area protection system (WAPS) uses measurements from multiple locations to detect and mitigate system-wide threats. A remedial action scheme (RAS), also called a special protection scheme in some jurisdictions, performs predetermined corrective actions when specified system conditions occur. A system integrity protection scheme (SIPS) is a broader term emphasizing preservation of system stability and prevention of uncontrolled separation or collapse.

A cascading failure is a sequence in which one or more outages increase stress on remaining equipment and cause additional outages. System separation is the division of an interconnected network into electrically isolated areas. Controlled islanding is intentional separation designed to create viable islands with acceptable generation-load balance. Uncontrolled islanding occurs when separation results from faults or protection actions without adequate preparation.

Out-of-step operation occurs when coherent groups of generators lose synchronism with one another. Transient stability concerns the ability of synchronous machines to remain in synchronism following a severe disturbance. Frequency stability concerns the ability of the system to maintain frequency following a major imbalance between generation and load. Voltage stability concerns the ability to maintain acceptable bus voltages under normal and disturbed conditions.

The Stability Problems Addressed by Wide-Area Protection

Angular instability and out-of-step behaviour

For a simplified lossless transmission link, the electrical power transferred between two equivalent sources can be represented by

\[

P_e=\frac{EV}{X}\sin\delta,

\]

where \(E\) and \(V\) are internal and receiving-end voltage magnitudes, \(X\) is transfer reactance, and \(\delta\) is the angular separation. As power transfer increases, the system operates closer to its angular limit. A fault, line trip, generator outage, or delayed fault clearing can cause rotor angles to accelerate. If synchronism cannot be restored, the angle continues to advance and the system becomes out of step.

A conventional distance relay may see an out-of-step swing as an apparent impedance trajectory entering one or more impedance zones. If it trips a heavily loaded line at an inappropriate point on the swing, it can worsen the disturbance. Out-of-step protection therefore distinguishes a stable power swing from an unstable swing and, when necessary, separates the system at a planned location.

The equal-area criterion provides a useful conceptual model for a simple machine-infinite-bus system. The accelerating energy gained during the fault must be balanced by the decelerating energy available after fault clearing. In a multimachine system, this simple criterion is not sufficient by itself, but it explains why fault duration, transfer level, clearing time, post-fault network strength, and generator electrical proximity are important.

Wide-area out-of-step detection may use angle separation, frequency differences, voltage phase trajectories, slip frequency, or equivalent impedance rates of change. A large and continuously increasing phase-angle difference between two coherent areas is a stronger indication of impending separation than a single local impedance measurement.

Frequency instability

System frequency reflects the balance between mechanical input and electrical demand. Immediately after a major generation loss, the imbalance is supplied by the kinetic energy of rotating machines, and frequency declines. The initial rate of change of frequency is approximately related to the power imbalance and aggregate inertia by the swing equation:

\[

\frac{df}{dt}\approx \frac{f_0}{2H_{eq}}\frac{\Delta P}{S_{base}},

\]

where \(H_{eq}\) is an equivalent inertia constant, \(f_0\) is nominal frequency, and \(\Delta P\) is the generation-load imbalance using a consistent sign convention.

Underfrequency load shedding (UFLS) is designed to arrest frequency decline by disconnecting selected blocks of load. Traditional UFLS uses several frequency thresholds and time delays. Modern schemes can incorporate rate of change of frequency, voltage, location, system inertia, and the size or type of the initiating contingency. The amount of load shed must be sufficient to restore balance, but excessive shedding creates unnecessary customer interruption and may produce overfrequency after recovery.

Frequency is not uniform throughout a disturbed interconnected system. Following separation or a major event, frequency may differ significantly between areas. A local relay can therefore understate or overstate the severity of a system-wide event. Wide-area measurements support adaptive load shedding, identification of the affected island, and coordination with generator tripping or controlled separation.

Voltage instability and undervoltage

Voltage instability is often associated with insufficient reactive support, excessive transfer over long corridors, motor stalling, generator reactive limits, or progressive network weakening. A simple load-flow relationship illustrates the problem: as transfer increases and reactive reserves decline, small changes in load or topology can produce increasingly large voltage changes. When the operating point approaches a voltage-collapse nose point, ordinary undervoltage relays may act too late or may shed load unnecessarily during a recoverable transient.

Undervoltage load shedding (UVLS) attempts to reduce demand before voltage decline becomes irreversible. Effective schemes consider voltage magnitude, duration, rate of decline, load composition, reactive-power margins, and the location of the measurement. Industrial motor loads, for example, can draw high reactive current during stalling and accelerate voltage deterioration. A geographically remote bus may show a moderate voltage while a critical load pocket is already unstable.

Wide-area voltage stability assessment may combine PMU voltage trends, angle differences, reactive-power flows, modal indicators, and online state estimation. The purpose is not merely to detect low voltage, but to determine whether voltage is declining toward an unstable operating condition and which corrective action has the greatest stabilizing effect.

Islanding and controlled separation

Islanding can be accidental or intentional. Accidental islanding may result from line faults, incorrect relay operation, overloaded corridors, or cascading trips. The resulting islands may contain excessive generation, insufficient generation, or an unstable mixture of sources and loads. Frequency and voltage may then deviate rapidly.

Controlled islanding is a last-resort defence action. It separates the system along selected boundaries so that each island has a reasonable balance of generation and demand, adequate voltage support, and acceptable internal transmission capability. The boundary must also avoid separating coherent generators from their supporting loads in an unstable manner.

Detection may use phase-angle separation, frequency divergence, slip frequency, active-power flow reversal, or a combination of indicators. The scheme must distinguish a planned separation from temporary oscillations and must act quickly enough to prevent uncontrolled tripping. After islanding, local frequency control, load shedding, generator controls, black-start resources, and restoration procedures become decisive.

Wide-Area Measurement and Protection Architecture

A typical architecture contains PMUs installed at selected buses, communication channels carrying measurements to substations or control centres, phasor data concentrators (PDCs) that align data by time stamp, analytics or decision logic, and field devices that execute commands. The architecture may be centralized, distributed, or hierarchical.

In a centralized scheme, a control centre or regional protection platform receives measurements and determines the action. This allows broad situational awareness and complex optimization, but communication delay, control-centre failure, and dependence on a central processor are concerns. In a decentralized scheme, local controllers exchange information directly and act without a single decision point. This can improve speed and resilience but may make coordination and validation more difficult. Hierarchical schemes combine local fast action with regional supervision and slower optimization.

A protection-grade communication path requires bounded latency, adequate bandwidth, accurate time synchronization, availability, authentication, and a defined behaviour during data loss. Measurements should carry quality flags indicating missing data, timing problems, bad values, or communication errors. The logic must not interpret stale data as a valid indication of system state.

The protection decision can be based on direct measurements or on a model. Direct logic may use conditions such as an angle difference exceeding a threshold while its derivative remains positive. Model-based logic may compare the measured state with a transient-stability boundary, estimate an equivalent corridor transfer limit, or calculate a stability margin. Model-based schemes can be more selective, but model errors and unusual operating conditions must be managed.

Designing Remedial-Action Schemes

A sound design begins with a threat assessment. Planners identify credible contingencies, vulnerable corridors, generator coherency groups, voltage-sensitive areas, frequency-response limitations, and possible protection interactions. Dynamic simulations are then performed across a broad range of dispatches, topology conditions, renewable-output levels, inertia values, load compositions, and fault-clearing times.

The next step is to define the objective of the scheme. The objective might be preventing loss of synchronism, maintaining a minimum frequency, preserving voltage in a load pocket, avoiding thermal overload, or creating stable islands. The action must be related directly to that objective. A scheme designed to prevent angular instability should not shed large amounts of load merely because a remote voltage temporarily decreases unless the relationship is demonstrated.

Typical remedial actions include:

• tripping selected generators or redispatching generation;
• shedding blocks of interruptible or firm load;
• switching shunt capacitors, reactors, or other reactive devices;
• opening selected transmission lines to control power flow;
• changing high-voltage direct-current power order;
• separating a network into planned islands;
• blocking or supervising local protection during stable power swings.

Selection of an action involves a trade-off between speed, magnitude, selectivity, reversibility, and customer impact. Generation tripping may be effective against overfrequency or angular stress but can aggravate a deficit in another island. Load shedding is rapid and predictable in some conditions, but it affects customers and may not correct a transmission-driven angular problem. Network switching can control flows but may create new overloads or reduce voltage support.

The scheme must be tested for both dependability and security. Dependability is the ability to act when action is required. Security is the ability to refrain from acting when action is not justified. Testing should include genuine events, measurement errors, communication delays, loss of channels, incorrect status indications, unusual topology, and simultaneous disturbances.

Coordination with conventional protection is essential. A RAS command must not interfere with primary fault clearing, breaker-failure protection, generator protection, or underfrequency and undervoltage schemes in a way that produces contradictory actions. Time grading must recognize that a wide-area scheme may act before slower local backup protection, while local protection must remain capable of clearing faults if the wide-area system is unavailable.

Synchrophasor-Based Analytics

The most useful wide-area indicators are rarely single threshold values. They are trends and relationships. Examples include the angle difference across a transmission corridor, the rate of angle separation, frequency difference between coherent areas, voltage magnitude decline, rate of change of frequency, damping of electromechanical oscillations, and active-power transfer relative to a stability limit.

A PMU reports a phasor in rectangular or polar form. The phase angle is meaningful only relative to a common time reference and a specified reference convention. Angle data must therefore be validated for time quality, instrument transformer behaviour, phase sequence, and communication latency. A sudden angle jump may represent an actual electrical event, a time-reference error, or a bad measurement.

Oscillation monitoring uses frequency-domain and time-domain methods. Poorly damped inter-area oscillations may appear as sustained variations in angle, power, or frequency. Modal identification can estimate oscillation frequency, damping, and participation. These results help distinguish a stable oscillation from an emerging loss of synchronism and support corrective actions such as power-transfer reduction, generator-controller tuning, or topology change.

State estimation remains important because PMU coverage is not universal. Hybrid estimators combine conventional SCADA data with synchrophasors. Advanced systems may use machine-learning models to detect abnormal patterns, classify disturbances, or predict stability margins. However, data-driven models require representative training data, explainability, protection against corrupted inputs, and rigorous validation under rare events. Artificial intelligence should support engineering decisions rather than replace validated protection logic without adequate evidence.

Defence-in-Depth Against Cascading Failures

A blackout-prevention strategy should be layered. The first layer is sound planning, adequate transfer margins, robust equipment ratings, and appropriate maintenance. The second is reliable primary protection and fast fault clearing. The third is automatic corrective action such as UFLS, UVLS, generator tripping, and controlled separation. The fourth is operator awareness, emergency procedures, and coordinated intervention. The final layer is restoration, including black-start capability, cranking paths, load pickup, and resynchronization.

Cascading risk is increased when several safeguards share a common failure mode. For example, a single communication network, common time source, or common software platform may compromise multiple protection regions simultaneously. Redundancy should therefore include functional and geographical diversity. Independent local fallback schemes are particularly important when wide-area information is unavailable.

Operators need clear arming criteria. A RAS may be armed only for selected operating conditions, such as high corridor transfer, particular generator dispatch, or a known outage pattern. Automatic arming based on validated topology and operating data can reduce human error, but incorrect topology information can be dangerous. Every arming decision should be recorded, auditable, and visible to the control room.

Illustrative Case Study: Preventing Separation of a Heavily Loaded Corridor

Background

Consider an illustrative interconnected regional grid containing a large generation area to the north and a load-dominated area to the south. A double-circuit transmission corridor transfers substantial power between them. Several large generators in the southern area are unavailable, and the remaining generation is operating near reactive and angular limits.

Situation

A three-phase fault occurs on one circuit. Primary protection clears the fault, but the affected circuit remains out of service. Power is transferred over the remaining circuit, and the phase angle between the northern and southern areas begins to increase. Local distance relays at both ends observe an impedance trajectory approaching their out-of-step characteristics. If either relay trips the remaining circuit without coordination, the southern area will separate with insufficient generation.

Analysis

PMUs at the corridor terminals show that the angle difference is increasing continuously, the frequency in the southern area is declining relative to the north, and the remaining circuit is approaching its emergency transfer limit. A transient-stability study has established that continued synchronism is unlikely unless transfer is rapidly reduced. The study also shows that tripping two selected northern generators and shedding a small, preselected block of noncritical southern load will reduce the accelerating stress without creating a severe frequency deficit.

The system-integrity scheme checks four conditions: the corridor circuit is unavailable, the angle difference exceeds an operating threshold, the angle-separation rate is positive, and the system topology corresponds to the studied contingency. Data-quality flags confirm that the PMU measurements are valid. The scheme then sends secure trip commands to the selected generators and load breakers while supervising local out-of-step elements.

Approach and outcome

The corrective actions reduce north-to-south transfer and slow the angular separation. The remaining circuit stays connected, and the two areas settle to a stable post-disturbance operating point. If the angle had continued to diverge despite the first action, a second-stage controlled separation would have opened a studied boundary and initiated area-specific load shedding.

Learning points

The case illustrates that wide-area protection is based on a sequence of evidence rather than a single measurement. It also shows the importance of selecting actions according to system physics: generator tripping reduces transfer stress, while carefully sized load shedding protects the deficit area. The scheme depends on accurate topology, validated synchrophasors, fast communication, coordination with distance protection, and a tested fallback strategy.

Risks, Limitations, and Common Engineering Errors

Wide-area protection has several inherent limitations. Measurement coverage may be incomplete, and PMUs may be unavailable at the most important buses. Communication delay can make a theoretically effective action too slow. Loss of the timing reference can corrupt angle comparisons. Instrument transformer saturation, transients, data dropouts, and incorrect phase identification can create misleading indications.

A frequent design error is selecting thresholds from a single operating case. Stability boundaries vary with dispatch, topology, inertia, load composition, controller settings, and renewable penetration. Another error is assuming that a faster action is always better. An overly fast but insecure scheme may trip during a stable power swing and create the very cascade it was intended to prevent.

Other common mistakes include:

• failing to study simultaneous outages and communication failures;
• ignoring breaker operating time and command execution delay;
• using stale or unvalidated topology data;
• treating a PMU angle as meaningful without checking its reference and time quality;
• neglecting interaction with generator, distance, frequency, and voltage protection;
• shedding load without considering restoration priority and critical services;
• omitting periodic testing after network or control-system changes.

Cybersecurity is a protection requirement, not merely an information-technology concern. Authentication, encryption where appropriate, network segmentation, least-privilege access, secure configuration, intrusion monitoring, patch governance, and incident response must be integrated with availability requirements. A cyber defence that blocks legitimate trip commands may be as damaging as an unauthorized command. Security controls must therefore be tested under realistic operational conditions.

Governance, Regulation, and Professional Responsibility

Because a wide-area scheme can affect many utilities and customers, its design requires coordinated governance. Responsibilities for arming, testing, maintenance, event analysis, and emergency override must be explicit. Protection settings and logic should be controlled through formal change management, with independent review for significant modifications.

Operators and engineers have a professional duty to document assumptions, identify uncertainty, and avoid presenting simulated performance as guaranteed field performance. Disturbance records should be preserved and analysed after every operation or suspected misoperation. Regulatory reliability standards commonly require planning studies, testing, evidence of maintenance, and reporting of significant protection-system events; the exact requirements depend on jurisdiction.

Automatic schemes should also respect public-interest priorities. Load shedding plans should distinguish critical hospitals, water facilities, emergency communications, and other essential services where technically feasible. At the same time, exemptions must not compromise the physical balance required for system survival. These choices require transparent technical and institutional review.

Current Developments and Best Practices

Modern grids have increasing inverter-based generation, reduced synchronous inertia, power-electronic controls, flexible demand, and increasingly variable power flows. These changes affect frequency response, fault current, voltage behaviour, and the meaning of traditional relay quantities. Wide-area schemes are consequently moving toward adaptive logic that uses operating conditions rather than fixed settings alone.

Digital substations and time-sensitive networking can improve data transport and device integration. Distributed edge analytics may reduce communication latency by processing measurements near the source. Hybrid protection systems combine local fast elements with wide-area confirmation. Probabilistic risk assessment is also being used to rank contingencies according to likelihood and consequence rather than relying exclusively on deterministic worst-case studies.

Recommended practice includes:

1. Define the stability threat and desired outcome before selecting measurements.

2. Use diverse measurements and require data-quality validation.

3. Design for communication loss, timing failure, bad data, and incorrect topology.

4. Maintain independent local fallback protection.

5. Test across a wide operating envelope, including high renewable output and low inertia.

6. Coordinate all automatic actions through integrated dynamic studies.

7. Use staged actions, with escalation only when the first response is inadequate.

8. Record, review, and learn from every operation and nonoperation.

9. Protect the scheme against cyber, physical, software, and common-mode failures.

10. Include restoration and post-islanding operation in the original design.

Chapter Summary

System integrity and wide-area protection extend conventional protection from local fault clearing to coordinated defence against instability and cascading failure. The principal threats include out-of-step operation, frequency decline, voltage collapse, uncontrolled islanding, and poorly coordinated protection actions. Synchrophasors provide synchronized measurements of angles, frequency, voltage, and power across a broad network, enabling detection of trends that local relays cannot observe.

Remedial-action schemes may shed load, trip generation, switch network elements, modify power transfers, or create controlled islands. Their design requires dynamic studies, validated measurements, reliable communications, coordination with conventional protection, and explicit treatment of dependability, security, cybersecurity, and fallback operation. Effective defence is layered: planning and robust primary protection are supplemented by automatic schemes, operator action, and restoration capability. The most important engineering principle is that a wide-area scheme must act on verified evidence, with actions matched to the physical mechanism threatening system integrity.

Key Terms

Synchrophasor: A time-synchronized measurement of a voltage or current phasor.

Phasor Measurement Unit: A device that measures synchronized phasors, frequency, and related quantities.

Wide-Area Measurement System: Infrastructure for collecting and analysing synchronized measurements over a broad grid area.

Wide-Area Protection System: Protection and control using measurements from multiple geographically separated locations.

Remedial Action Scheme: An automatic scheme that performs corrective actions for specified system threats.

System Integrity Protection Scheme: A coordinated defence mechanism intended to preserve stability and prevent cascading failure.

Out-of-Step Operation: Loss of synchronism between coherent groups of generators or areas.

Power Swing: A variation in power-system angles and flows following a disturbance.

Transient Stability: The ability of synchronous machines to remain in synchronism after a severe disturbance.

Frequency Stability: The ability to maintain acceptable frequency following generation-load imbalance.

Voltage Stability: The ability to maintain acceptable bus voltages under normal and disturbed conditions.

Underfrequency Load Shedding: Automatic disconnection of selected load to arrest frequency decline.

Undervoltage Load Shedding: Automatic disconnection of load to prevent progressive voltage collapse.

Controlled Islanding: Intentional separation into electrically viable areas.

Cascading Failure: A sequence of outages in which each event increases the likelihood of further outages.

Dependability: The ability of a protection scheme to operate when required.

Security: The ability of a protection scheme to avoid unwanted operation.

Phasor Data Concentrator: A device or software function that aligns and aggregates synchrophasor data.

Rate of Change of Frequency: The time derivative of system frequency, often used to detect rapid imbalance.

Controlled Separation: Deliberate opening of selected boundaries to prevent uncontrolled system collapse.

Review Questions

Short Answer Questions

1. What distinguishes a wide-area protection system from conventional local protection?

2. Define out-of-step operation and explain why it can be dangerous for distance relays.

3. What is the purpose of underfrequency load shedding?

4. Why must synchrophasor measurements include time-quality and data-quality information?

5. Distinguish dependability from security in protection-system design.

Long Answer Questions

1. Explain the causes, detection methods, and mitigation strategies for out-of-step conditions.

2. Discuss the architecture and engineering requirements of a synchrophasor-based wide-area protection system.

3. Compare underfrequency and undervoltage load shedding with respect to triggers, objectives, and risks.

4. Explain how controlled islanding can prevent a cascading blackout and identify the conditions required for viable islands.

5. Describe a defence-in-depth strategy for protecting an interconnected power system against cascading failures.

Analytical / Application Questions

1. A corridor angle is increasing, frequency in the receiving area is declining, and one of two parallel lines has already tripped. Propose a staged remedial-action scheme and justify the measurements and actions selected.

2. A PMU-based scheme issues a generator-trip command during a disturbance later shown to be a stable power swing. Analyse possible causes and recommend design and testing changes.

3. Design a conceptual protection and restoration plan for a low-inertia system with high inverter-based generation, considering frequency response, voltage support, communication loss, cybersecurity, and controlled islanding.

22. Multiple Choice Questions with Answers

Question 1

Which measurement is most directly useful for identifying growing angular separation between two interconnected areas?

A. The difference between synchronized voltage phase angles at the area terminals

B. The local magnitude of one phase current only

C. The resistance of a single feeder

D. The transformer oil temperature

Correct Answer: A. The difference between synchronized voltage phase angles at the area terminals

Question 2

The primary purpose of underfrequency load shedding is to:

A. Increase transmission reactance

B. Restore generation-load balance by disconnecting selected demand

C. Prevent all transmission faults

D. Increase generator rotor angle separation

Correct Answer: B. Restore generation-load balance by disconnecting selected demand

Question 3

Why can a conventional distance relay misoperate during an out-of-step swing?

A. The swing may produce an apparent impedance trajectory resembling a fault

B. The relay cannot measure current

C. Distance relays operate only at zero voltage

D. Out-of-step swings eliminate all power flow

Correct Answer: A. The swing may produce an apparent impedance trajectory resembling a fault

Question 4

Which condition most strongly supports controlled islanding rather than simple load shedding?

A. A stable system with a small temporary voltage variation

B. Persistent divergence of phase angles between coherent areas

C. A single feeder overload cleared within normal protection time

D. A small increase in transformer temperature

Correct Answer: B. Persistent divergence of phase angles between coherent areas

Question 5

In a wide-area protection scheme, security means the ability to:

A. Operate for every possible disturbance

B. Operate without any communication system

C. Avoid unwanted operation when action is not justified

D. Disconnect the largest possible amount of load

Correct Answer: C. Avoid unwanted operation when action is not justified

Question 6

Which combination is most appropriate for validating an out-of-step remedial action?

A. Angle difference, angle-separation rate, topology, and data quality

B. Ambient temperature and transformer oil level only

C. One local current magnitude without time synchronization

D. Customer voltage complaints only

Correct Answer: A. Angle difference, angle-separation rate, topology, and data quality

Question 7

A major limitation of a centralized wide-area protection scheme is its:

A. Inability to use measurements from several locations

B. Dependence on communication and central processing availability

C. Guaranteed lack of selectivity

D. Requirement that all generators be manually operated

Correct Answer: B. Dependence on communication and central processing availability

Question 8

If frequency declines rapidly after a generator outage, a lower aggregate inertia generally causes:

A. A slower initial frequency change

B. A faster initial rate of frequency decline for the same imbalance

C. No frequency response at all

D. Automatic voltage recovery

Correct Answer: B. A faster initial rate of frequency decline for the same imbalance

Question 9

Which design practice best addresses common-mode failure in a WAPS?

A. Using one communication path and one timing source for all functions

B. Removing all local fallback protection

C. Providing geographical and functional diversity

D. Disabling event recording

Correct Answer: C. Providing geographical and functional diversity

Question 10

Why should wide-area remedial actions be tested over many operating conditions?

A. Stability boundaries change with topology, dispatch, inertia, and load composition

B. Protection settings are independent of system conditions

C. Only nominal operating conditions are physically possible

D. Testing replaces the need for communication security

Correct Answer: A. Stability boundaries change with topology, dispatch, inertia, and load composition