Bachelors Program in Electrical Engineering
Power Systems
•
Bachelor
Power-System Protection and Switchgear
Introduction
Power-system protection detects abnormal electrical conditions and isolates only the affected equipment. It must operate quickly enough to limit injury, fire, equipment damage and instability, yet remain secure during normal loading, switching, external faults and instrument-transformer transients. Switchgear—including circuit breakers, disconnectors, earthing switches and fuses—executes or supports the isolation commanded by protection systems.
Protection is therefore a coordinated system rather than an individual relay. Primary plant, current transformers (CTs), voltage transformers (VTs), relays, trip circuits, circuit breakers, communication channels, station batteries and control software must all perform correctly. Modern numerical relays add event recording, communications and adaptive functions, but also introduce configuration and cybersecurity risks.
Learning Objectives
After studying this chapter, students should be able to:
explain protection zones, overlapping boundaries and primary–backup protection;
select and assess CTs, VTs, fuses and circuit breakers;
apply overcurrent, differential and distance-relay principles;
develop preliminary protection designs for feeders, transformers, generators and busbars;
validate settings for sensitivity, selectivity, speed, dependability and security;
interpret coordination studies and relay event records; and
apply cybersecurity-aware engineering practices to digital substations.
1. Protection Philosophy
1.1 Faults and abnormal operating conditions
Shunt faults include phase-to-earth, phase-to-phase, two-phase-to-earth and three-phase faults. Series abnormalities include open conductors and high-resistance joints. Equipment may also experience overload, overheating, overfluxing, unbalance, loss of excitation, reverse power, power swings or abnormal frequency.
A fault study supplies the maximum and minimum fault currents required for protection design. Maximum fault current determines interrupting duty and CT saturation risk. Minimum fault current determines whether protection remains sensitive under weak-source, high-resistance or minimum-generation conditions.
For a balanced three-phase fault with line-to-line voltage VLL and fault current If, the apparent fault level is
Sf = √3 VLL If
Here Sf is three-phase apparent power in VA, VLL is in volts and If is in amperes. This expression applies to a balanced three-phase condition at the stated voltage.
1.2 Performance criteria
Criterion
Engineering meaning
Selectivity
Only the smallest practicable portion of the network is disconnected.
Speed
Faults are cleared before thermal, mechanical or stability limits are exceeded.
Sensitivity
The relay detects the minimum credible in-zone fault.
Dependability
The protection operates when required.
Security
It does not operate when operation is not required.
Reliability
Combined dependability and security over the specified duty.
Simplicity
The design avoids unnecessary components and interactions.
Increasing sensitivity can reduce security, while added intentional delay improves grading but increases damage. Protection design is therefore a constrained engineering optimization, not simply the selection of the fastest relay.
1.3 Primary and backup protection
Primary protection clears faults in its assigned zone with minimum delay. Local backup may use a second relay, independent trip coil or breaker-failure scheme at the same station. Remote backup trips an upstream breaker after a longer delay. Backup should be sufficiently independent: duplicated relays connected to the same failed DC supply do not provide complete redundancy.
Breaker-failure protection starts when a trip command is issued. If current persists, or breaker auxiliary contacts fail to confirm opening, it retrips the breaker and then trips adjacent breakers after a short supervised delay.
2. Protection Zones
A protection zone is the part of the network for which a protection system is responsible. CT locations normally define differential-zone boundaries. Adjacent zones deliberately overlap around circuit breakers so that a fault within the switchgear is not left unprotected if one zone fails to clear it.
Overlapping generator, transformer and busbar protection zones bounded by current transformers
Figure: Overlapping generator, transformer and busbar protection zones bounded by current transformers
Figure: Adjacent protection zones overlap around CB1 and CB2, with boundaries established by CTs on both sides of each breaker.
In the figure, CB1 lies in both the generator and transformer zones, while CB2 lies in both the transformer and busbar zones. A fault on either breaker is consequently seen by at least one complete protection scheme. Actual arrangements depend on switchgear layout; ring-bus and breaker-and-a-half substations require zones that change logically with disconnector status.
3. Instrument Transformers
3.1 Current transformers
A CT reproduces primary current at a lower standardized value, commonly 1 A or 5 A. Its ideal current relationship is
Np Ip = Ns Is
where Np and Ns are primary and secondary turns, and Ip and Is are primary and secondary currents. Real CTs require excitation current, creating ratio and phase errors.
A protection CT must reproduce fault current without unacceptable saturation. Performance depends on core area, remanence, secondary winding resistance, lead resistance and relay burden. Saturation is especially important for differential and high-impedance bus protection because unequal CT errors create false differential current.
The secondary of an energized CT must never be left open. The primary current then drives the core toward high flux, potentially producing dangerous secondary voltage, overheating and residual magnetism. CT circuits are shorted before relay removal.
CT selection includes:
ratio based on maximum continuous current and required sensitivity;
short-time thermal and dynamic ratings;
protection class and transient performance;
secondary burden, including leads;
accuracy-limit or knee-point requirements; and
compatibility among CTs used in differential schemes.
3.2 Voltage transformers
An inductive VT or capacitor voltage transformer (CVT) supplies scaled voltage for distance, directional, synchronizing and metering functions. VT secondary circuits are fused or protected, but must not be short-circuited. CVT transients can distort voltage during close-in faults and may cause transient overreach unless the distance relay includes suitable filtering and polarization.
Loss-of-potential supervision blocks voltage-dependent elements when a fuse failure or wiring defect creates a false undervoltage or false impedance condition.
4. Switchgear and Fault Interruption
4.1 Circuit breakers
A circuit breaker must make, carry and interrupt normal and fault current. Principal ratings include:
rated maximum voltage and insulation level;
continuous current;
symmetrical interrupting current;
asymmetrical or peak making current;
short-time withstand current and duration;
operating sequence and interrupting time; and
transient recovery voltage capability.
If the three-phase short-circuit level is known, the symmetrical current is
Isc = Ssc ÷ (√3 VLL)
where Ssc is in VA and VLL is in volts. The selected breaker interrupting rating must exceed the calculated duty after applicable standards, tolerances and future system expansion are considered. DC offset is addressed through the specified asymmetrical rating and X/R-dependent duty, not by the symmetrical equation alone.
Vacuum breakers dominate medium-voltage applications, while sulfur-hexafluoride equipment remains common at high voltage. Because SF₆ has a very high global-warming potential, vacuum and alternative-gas technologies are increasingly adopted. Gas handling, leakage reporting and end-of-life recovery are environmental obligations.
A disconnector provides visible or assured isolation but is generally not intended to interrupt fault current. An earthing switch grounds isolated equipment so that maintenance can proceed safely. Electrical and mechanical interlocks prevent unsafe operating sequences.
4.2 Fuses
A fuse melts when heating caused by current exceeds its time–current capability. Current-limiting fuses interrupt before the prospective fault current reaches its natural peak. Two related manufacturer data are pre-arcing I2t and total clearing I2t, where
I2t = ∫ i2(t) dt
The integral has units A²·s. It is a thermal-throughput indicator, not a universal substitute for the complete time–current curve. Fuse selection considers continuous current, starting or inrush current, voltage rating, interrupting capacity, minimum melting curve, total clearing curve and coordination with upstream and downstream devices.
5. Protective Relays
Electromechanical relays derive torque from electromagnetic forces. Static relays use analog electronics, while numerical relays sample electrical quantities and implement protection in software. Numerical devices commonly provide multiple elements, oscillography, sequence-of-events records, self-monitoring and IEC 61850 communication.
Relay settings must document the protected equipment, CT/VT ratios, firmware, logic equations, enabled functions, pickup values, delays, communication dependencies and study assumptions. A relay feature should not be enabled merely because it is available.
6. Overcurrent Protection Design
6.1 Operating principles
An overcurrent element operates when current exceeds its pickup. Instantaneous protection, ANSI 50, has no intentional delay. Time overcurrent, ANSI 51, may use definite-time or inverse-time characteristics. Directional supervision, ANSI 67, is required where fault current can flow in either direction, as in interconnected networks or feeders with distributed generation.
For IEC inverse curves, relay operating time is commonly represented by
t = TMS × k ÷ [(I ÷ Is)^α − 1]
Here t is operating time in seconds, TMS is the time multiplier setting, I is relay current, Is is pickup current, and k and α are curve constants. For the IEC standard-inverse curve, k = 0.14 and α = 0.02. The equation is valid for I > Is and does not include breaker clearing time or relay overtravel.
6.2 Design procedure
Model maximum and minimum generation, network topology, motor contribution and distributed generation.
Determine maximum load, transformer inrush, motor starting and permissible overload.
Calculate maximum and minimum phase and earth-fault currents at relevant locations.
Select CT ratios and verify saturation and burden.
Choose pickup above maximum legitimate load but below minimum fault current. A preliminary phase pickup may be 1.2–1.5 times maximum load, subject to equipment limits and study results.
Select curve family to coordinate with fuses, transformer damage curves and downstream relays.
Grade from the most downstream device toward the source.
Check the coordination margin over the entire common fault-current range—not at one current only.
Check instantaneous-element reach against downstream through-faults and transient overreach.
Validate using primary and secondary injection, logic testing and documented setting calculations.
6.3 Worked coordination and validation
An illustrative 11 kV radial system has a downstream feeder relay R2 and upstream relay R1. R2 has a 300/1 CT and 300 A primary pickup; R1 has a 400/1 CT and 400 A primary pickup. Their maximum loads are 240 A and 320 A respectively, so each pickup is 1.25 times maximum load. Fault current through both relays ranges from 1.8 kA to 5.0 kA. Both use IEC standard-inverse curves.
Choose TMS2 = 0.20. At the minimum fault current, the R2 current multiple is 1800 ÷ 300 = 6. Thus
t2 = 0.20 × 0.14 ÷ (60.02 − 1) = 0.768 s
If only this point were checked, a 0.35 s grading margin would suggest an R1 target time of 1.118 s. At R1, the current multiple is 4.5, giving an apparent TMS1 ≈ 0.244. This setting is inadequate at higher fault current.
At 5.0 kA, R2 operates in
t2 = 0.20 × 0.14 ÷ (16.6670.02 − 1) = 0.484 s
With TMS1 = 0.244, R1 would operate in approximately 0.659 s, leaving only 0.175 s. To retain 0.35 s at 5.0 kA, R1 must operate no faster than 0.834 s. Therefore
TMS1 = 0.834(12.50.02 − 1) ÷ 0.14 ≈ 0.309
At 1.8 kA, this revised R1 setting gives approximately 1.417 s, a margin of about 0.649 s. The design therefore meets the assumed 0.35 s requirement at both endpoints. A software study must still scan intermediate currents, include breaker clearing times and check alternative topologies. This example demonstrates why coordination cannot be validated at a single fault level.
7. Distance Protection
7.1 Principle and characteristics
A distance relay estimates impedance from measured voltage and current:
Zapp = Vloop ÷ Iloop
The loop quantities depend on fault type. For a phase-to-phase fault, the relay uses the corresponding voltage and current differences. For a phase-to-earth fault on phase A, a common compensated form is
Zapp = VA ÷ (IA + K0 3I0), K0 = (Z0 − Z1) ÷ (3Z1)
Here Z1 and Z0 are positive- and zero-sequence line impedances, and 3I0 = IA + IB + IC is residual current. This form assumes the relay manufacturer defines residual compensation as shown; implementation conventions must be checked.
Mho characteristics are inherently directional and perform well on long lines. Quadrilateral characteristics independently control resistive and reactive reach, improving high-resistance-fault coverage. Directional polarization, memory voltage, load encroachment, power-swing blocking and out-of-step tripping influence practical performance.
7.2 Design procedure
Obtain verified positive- and zero-sequence line impedances and mutual-coupling data.
calculate primary and relay-secondary impedances from CT and VT ratios;
select phase and earth-loop characteristics;
set Zone 1 to avoid overreach, commonly 80–90% of the protected line;
set Zone 2 to cover the remainder of the line plus a secure portion of the shortest adjacent line, with delay;
set Zone 3 as remote backup without encroaching on stable load or unacceptable power swings;
assess fault resistance, remote infeed, source impedance ratio, series compensation and weak-infeed conditions;
coordinate communication-assisted schemes such as permissive overreach transfer trip or directional comparison blocking;
validate all fault types, locations and contingencies with steady-state and, where necessary, electromagnetic-transient simulations.
7.3 Worked line-protection design
A 132 kV, 100 km line has positive-sequence impedance z1 = 0.08 + j0.40 Ω/km. Its total impedance is
ZL = 100(0.08 + j0.40) = 8 + j40 Ω
Set Zone 1 to 80%:
Z1,reach = 0.8ZL = 6.4 + j32 Ω
The shortest adjacent line is 40 km with the same impedance per kilometre. A preliminary Zone 2 reach covering the protected line plus 50% of that line is
A metallic three-phase fault 75 km from the relay presents approximately 6 + j30 Ω and should lie inside Zone 1. A fault at 95 km presents 7.6 + j38 Ω: it is outside the 80% Zone 1 reach but inside Zone 2.
With a 1000/1 CT and a 132 kV/110 V VT, the impedance conversion is
This is well above the Zone 2 reach magnitude of approximately 49 Ω, but an R–X load-encroachment check remains necessary because load angle and characteristic shape matter. Remote infeed and resistive faults must also be simulated; simple geometric reach calculations alone do not constitute final validation.
8. Transformer Protection
Transformer faults include winding earth faults, interturn faults, core faults, bushing failures and overheating. Through-faults, magnetizing inrush, overexcitation and CT saturation must not cause incorrect operation.
8.1 Percentage differential protection
After ratio, vector-group and zero-sequence compensation, a two-winding differential relay forms operating and restraint quantities. One common definition is
Iop = |I'1 + I'2|, Irest = (|I'1| + |I'2|) ÷ 2
Currents I'1 and I'2 are referred to a common base and assigned positive directions into the protected transformer. For load or an external fault, they ideally sum to zero. A biased characteristic may trip when
Iop > max(Imin, S Irest)
where Imin is minimum differential pickup and S is the applicable slope. Practical relays often use two or more slopes to provide stronger restraint at high through-current.
Second-harmonic restraint or waveform-based algorithms provide security during magnetizing inrush. Overexcitation, governed by high V/Hz, may require fifth-harmonic or dedicated volts-per-hertz supervision. Restricted earth-fault protection provides sensitive coverage near a grounded winding neutral. Buchholz and sudden-pressure devices detect internal gas formation or pressure change in oil-filled transformers.
8.2 Complete design sequence
Obtain transformer rating, vector group, winding connections, tap range, grounding and through-fault withstand.
Select CT ratios so rated secondary currents are close to the relay nominal current.
configure vector-group, ratio and zero-sequence compensation;
choose restraint slopes using tap error, CT error and saturation studies;
configure inrush and overexcitation security without unnecessarily blocking genuine internal faults;
apply restricted earth-fault, thermal, pressure and backup overcurrent elements as required;
test internal and external faults over the tap range, including CT saturation;
verify trip matrix, lockout, breaker-failure initiation and event recording.
8.3 Worked differential validation
A 25 MVA, 33/11 kV transformer has rated line currents
IHV = 25 MVA ÷ (√3 × 33 kV) = 437.4 A
ILV = 25 MVA ÷ (√3 × 11 kV) = 1312.2 A
Choose 500/1 HV CTs and 1500/1 LV CTs. At rated load, both produce approximately 0.875 A, before the relay applies vector-group compensation.
During a high external fault, suppose the compensated currents should have equal and opposite magnitudes, but one CT reports 3.50 A and the partially saturated CT reports 3.30 A. Then
Iop = |3.50 − 3.30| = 0.20 A
Irest = (3.50 + 3.30) ÷ 2 = 3.40 A
The differential percentage is 0.20 ÷ 3.40 × 100 = 5.88%. With a 30% slope, the biased threshold is 0.30 × 3.40 = 1.02 A, so the relay remains secure.
For an internal fault, suppose compensated currents entering the transformer are 3.0 A and 2.6 A. Then Iop = 5.6 A, Irest = 2.8 A, and the 30% threshold is 0.84 A. The differential element operates decisively. Final commissioning must additionally test tap extremes, phase shifts, earth faults and inrush records.
9. Generator Protection
Generator protection must detect internal faults while avoiding unnecessary unit trips for survivable system disturbances. Typical functions include:
stator differential protection;
stator earth-fault protection, including neutral overvoltage and subharmonic injection where near-100% coverage is required;
rotor earth-fault protection;
negative-sequence protection for unbalanced-current heating;
reverse-power protection against motoring;
loss-of-excitation protection using impedance characteristics;
overvoltage, undervoltage, overfrequency and underfrequency;
volts-per-hertz protection against overfluxing; and
out-of-step protection where system studies justify it.
Stator differential settings follow principles similar to transformer differential protection but do not require transformer vector-group compensation unless unit-transformer currents are included. Generator grounding strongly affects earth-fault current and the sensitivity of stator earth-fault protection. Reverse-power delay must distinguish sustained prime-mover failure from transient power oscillation.
Tripping actions differ by hazard. Some conditions require generator breaker opening, field suppression and prime-mover shutdown; others require an alarm or controlled unloading. The trip matrix must be designed with mechanical and process specialists.
10. Busbar Protection
A bus fault has severe consequences because multiple sources feed a low-impedance location. Bus protection must therefore be both fast and secure.
Low-impedance numerical differential schemes calculate differential and restraint currents for each dynamically selected zone. Disconnector auxiliary contacts assign bays to the correct bus section. A separate check zone supervises the main zones and reduces the risk of operation caused by incorrect isolator status.
High-impedance differential schemes connect matched CTs in parallel with a high-impedance relay and stabilizing resistor. Their design requires explicit calculation of CT knee-point voltage, loop resistance and stability voltage; it cannot be based only on CT ratio. CT saturation during external faults is the principal security challenge.
Busbar protection design should include:
every source, feeder, coupler and transfer-bus configuration;
CT polarity and boundary verification;
dynamic-zone logic and check-zone supervision;
external-fault CT-saturation tests;
breaker-failure tripping of all required adjacent breakers; and
maintenance arrangements that do not silently disable the entire scheme.
11. Coordination and Setting Validation
A coordination study overlays relay, fuse, recloser, cable, transformer and motor curves on a common log–log time–current graph. Selectivity must be checked for both phase and earth faults and for all credible network states.
A defensible validation process includes:
independent review of the fault model and settings;
minimum and maximum source conditions;
N−1 equipment outages and alternative bus configurations;
arc resistance and high-resistance earth faults;
CT saturation and VT/CVT transient behavior;
breaker operating and interrupting times;
distributed-generation contribution and reverse power flow;
end-to-end testing of communication-assisted schemes;
secondary injection of relay logic; and
primary injection where system configuration permits.
Settings management is a safety-critical configuration-control process. Approved values, calculation files, relay setting files and installed settings must agree. Unauthorized or undocumented changes can defeat an otherwise correct design.
12. Illustrative Case: Protection of an Industrial Intake Substation
Background
An illustrative manufacturing plant receives power through two 33/11 kV, 25 MVA transformers connected to a sectionalized 11 kV bus. Each transformer incomer and bus section has a circuit breaker. Large motors and embedded generation can contribute fault current.
Problem
The original protection used nondirectional overcurrent relays. When the embedded generator operated, faults on one feeder could be supplied from both directions. Coordination margins also became too small after a utility fault-level increase.
Analysis
Engineers developed maximum- and minimum-fault models for utility-connected, islanded and one-transformer-out conditions. They found that feeder current direction was no longer a reliable indicator of fault location without voltage polarization. The bus fault duty also approached the existing breaker rating. CT saturation simulations showed that unrestricted sensitivity in the bus differential scheme could threaten security during a close external fault.
Approach and solution
The project team:
replaced feeder protection with directional phase and earth overcurrent;
graded inverse-time elements over the full common-current range;
installed transformer differential and restricted earth-fault protection;
implemented low-impedance bus differential with a check zone;
upgraded breakers whose verified interrupting margins were inadequate;
added breaker-failure logic and duplicated DC trip supplies;
tested generator islanding and resynchronization logic; and
End-to-end tests confirmed selective tripping for forward and reverse faults. External-fault tests demonstrated bus-differential stability under simulated CT saturation. Event reports and time synchronization reduced subsequent disturbance-analysis time.
Learning points
Network changes can invalidate old settings even when no relay has failed. Directionality, CT transient performance, breaker duty, communication logic and cybersecurity must be reviewed as one coordinated design.
13. Digital Protection and Cybersecurity
IEC 61850 substations may use GOOSE messages for fast peer-to-peer trips and interlocks, sampled values for digitized CT/VT data, and station-bus services for supervision. These technologies reduce copper wiring and enable flexible schemes, but communication failures and malicious actions can affect protection.
Cybersecurity measures should include:
network segmentation between protection, station control and corporate systems;
role-based access and unique user accounts;
multifactor authentication for remote engineering access;
protocol and application whitelisting where feasible;
authenticated, integrity-protected communications supported by the equipment;
controlled firmware and setting-file updates;
secure backups and tested recovery procedures;
redundant, monitored time synchronization;
event logging with protected timestamps; and
continuous asset and configuration inventories.
IEC 62351 provides security mechanisms relevant to power-system communications. Applicable national requirements may include critical-infrastructure or reliability standards. Security controls must not introduce unacceptable trip latency or block dependable operation; protection and cybersecurity engineers must test them together.
Machine learning can assist event classification, oscillography screening and predictive maintenance. It should not replace deterministic protection without explainability, bounded behavior, representative validation data and a safe fallback. Human approval remains essential for setting changes that can disconnect customers or generators.
Ethically, engineers must prioritize public safety, transparent change control and truthful reporting of misoperations. Event data may reveal operationally sensitive information and must be retained and shared under approved governance.
14. Best-Practice Design Workflow
A practical protection project proceeds from network data to fault studies, equipment-duty checks, functional requirements, preliminary settings, coordination, transient assessment, peer review, factory testing, commissioning and periodic maintenance. Every trip path—from instrument transformer to relay input, logic, DC supply, trip coil and breaker mechanism—must be tested.
Protection should be reassessed after generation additions, conductor changes, transformer replacement, grounding changes, topology changes, firmware updates or significant fault-level revisions. Post-event analysis should compare expected and actual relay targets, waveforms, breaker times and communication records.
Chapter Summary
Power-system protection divides the network into overlapping zones bounded mainly by CT locations. Overlaps around circuit breakers prevent unprotected switchgear faults. CT and VT performance, breaker duty and DC trip-system integrity are as important as relay algorithms.
Overcurrent protection requires pickup selection and grading over the entire fault-current range. Distance protection measures loop impedance and must account for fault resistance, infeed, load encroachment and instrument-transformer transients. Transformer differential protection requires ratio and vector compensation, percentage restraint and inrush security. Generators require protection against electrical and mechanical abnormalities, while busbars require fast differential protection that remains stable during external-fault CT saturation.
Dependable protection results from validated settings, coordinated backup, disciplined testing and controlled configuration. Digital substations add communications and analytical capability but require cybersecurity measures designed so that security does not impair protection speed or dependability.
Key Terms
Protection zone: The network section assigned to a protection system.
Selectivity: Isolation of only the faulted or minimally necessary equipment.
Dependability: Probability that protection operates when required.
Security: Ability to avoid operation when no operation is required.
Current transformer: Instrument transformer producing a scaled replica of primary current.
Voltage transformer: Instrument transformer producing a scaled replica of primary voltage.
CT saturation: Nonlinear core operation that causes secondary-current distortion.
Circuit breaker: Device capable of making, carrying and interrupting normal and fault currents.
Interrupting rating: Maximum specified fault current a breaker can safely interrupt.
Inverse-time relay: Relay whose operating time decreases as current magnitude increases.
Coordination margin: Time separation between primary and backup protective devices.
Distance relay: Relay that determines fault location primarily from measured loop impedance.
Differential protection: Protection based on comparison of currents entering and leaving a zone.
Percentage restraint: Differential-relay bias that increases security as through-current rises.
Restricted earth fault: Sensitive differential protection for earth faults within a limited winding zone.
Breaker failure: Failure of a breaker to interrupt current after receiving a trip command.
Load encroachment: Entry of heavy-load impedance into a distance-relay characteristic.
GOOSE: IEC 61850 fast peer-to-peer event messaging service.
Check zone: Supervisory bus differential zone encompassing multiple main zones.
Review Questions
Short Answer Questions
Why are adjacent protection zones intentionally overlapped around circuit breakers?
Why must an energized CT secondary never be open-circuited?
Distinguish breaker interrupting rating from continuous-current rating.
What is the purpose of percentage restraint in differential protection?
Why is loss-of-potential supervision used with distance relays?
Long Answer Questions
Explain the relationships among sensitivity, selectivity, speed, dependability and security.
Describe a complete procedure for designing and validating radial overcurrent protection.
Explain the operating principles, zones and limitations of transmission-line distance protection.
Develop a protection philosophy for a power transformer, including electrical and mechanical protection.
Compare high-impedance and low-impedance busbar differential protection.
Analytical / Application Questions
A 33 kV bus has a three-phase short-circuit level of 750 MVA. Calculate the symmetrical fault current and discuss the additional information required to select a circuit breaker.
For a 60 km line with z1 = 0.12 + j0.35 Ω/km, calculate an 85% Zone 1 reach and propose a method for validating its security.
Design a cybersecurity-aware commissioning test for an IEC 61850 GOOSE-based breaker-failure scheme, including normal, delayed, missing and malicious-message scenarios.
Multiple Choice Questions with Answers
Question 1
Which arrangement prevents a circuit-breaker fault from lying outside adjacent protection zones?
A. Terminating both zones at the breaker centerline
B. Overlapping zones using CTs on both sides of the breaker
C. Removing the breaker from differential protection
D. Using identical time delays in all relays
Correct Answer: B. Overlapping zones using CTs on both sides of the breaker
Question 2
Why is an energized current-transformer secondary not permitted to remain open-circuited?
A. It forces primary current to zero
B. It always trips the upstream breaker
C. It can develop dangerous voltage and overheat the core
D. It reduces primary insulation voltage to zero
Correct Answer: C. It can develop dangerous voltage and overheat the core
Question 3
An IEC standard-inverse relay has TMS = 0.20 and a current multiple of 6. Using t = 0.14TMS/(M0.02-1), what is its approximate operating time?
A. 0.077 s
B. 0.350 s
C. 0.768 s
D. 6.000 s
Correct Answer: C. 0.768 s
Question 4
What symmetrical current corresponds to a 500 MVA three-phase fault level at 11 kV?
A. 8.75 kA
B. 15.15 kA
C. 26.24 kA
D. 45.45 kA
Correct Answer: C. 26.24 kA
Question 5
A 100 km line has z1 = 0.08 + j0.40 Ω/km. What is an 80% Zone 1 reach in primary ohms?
A. 6.4 + j32 Ω
B. 8 + j40 Ω
C. 9.6 + j48 Ω
D. 0.064 + j0.32 Ω
Correct Answer: A. 6.4 + j32 Ω
Question 6
During an external transformer fault, compensated CT-current magnitudes are 3.50 A and 3.30 A in opposing directions. Using Iop=|3.50-3.30| and Irest=(3.50+3.30)/2, what is the differential percentage?
A. 2.94%
B. 5.88%
C. 30.0%
D. 94.3%
Correct Answer: B. 5.88%
Question 7
When residual current is defined as 3I0, which ground-distance compensation factor is used in VA/(IA+K0 3I0)?
A. K0=(Z0-Z1)/(3Z1)
B. K0=Z1/Z0
C. K0=(Z0+Z1)/Z1
D. K0=3Z0/Z1
Correct Answer: A. K0=(Z0-Z1)/(3Z1)
Question 8
What is the principal purpose of a check zone in numerical busbar protection?
A. To measure transformer temperature
B. To increase feeder load capacity
C. To supervise the main differential zones and improve security
D. To replace every bay CT
Correct Answer: C. To supervise the main differential zones and improve security
Question 9
Which statement correctly distinguishes protection dependability from security?
A. Dependability means operating when required; security means avoiding unwanted operation.
B. Dependability concerns breaker speed; security concerns CT ratio.
C. Dependability and security are identical measures.
D. Dependability means avoiding operation; security means operating for every disturbance.
Correct Answer: A. Dependability means operating when required; security means avoiding unwanted operation.
Question 10
Which practice most directly reduces unauthorized manipulation of digital-relay settings?
A. Sharing one engineering password among all staff
B. Disabling event logs
C. Connecting protection relays directly to the public internet
D. Using role-based access, authenticated engineering sessions and controlled setting files
Correct Answer: D. Using role-based access, authenticated engineering sessions and controlled setting files