CAT IIIA DUAL (Fail Operational) autoland minimums are:

CAT IIIA DUAL (Fail Operational) autoland minimums are:

• A. CAT II autoland minimums: 100' DH / 1000 RVR; One autopilot; No A/THR
• B. CAT IIIA SINGLE (Fail Passive): 50' DH / 600 RVR; One autopilot; Yes A/THR
• C. CAT IIIA DUAL (Fail Operational): 100' AH / 600 RVR; Both autopilot; Yes A/THR
• D. CAT IIIB DUAL: 100' AH / 300 RVR; Both autopilot; Yes A/THR

Answer: (C)

The most important idea here is how autoland minimums depend on both the category of autoland and the level of redundancy (autopilot failure protection). For Cat IIIA with dual, fail-operational capability, the aircraft must be able to complete the landing even if one autopilot fails, so both autopilots remain engaged and auto thrust is required. In this configuration, the specified minimums are 100 feet height above the runway (AH) with 600 meters (RVR) visibility, and both autopilots must be in use with A/THR engaged. This combination ensures the system can manage the descent, flare, and touchdown reliably using full redundancy, which is the essence of “Fail Operational.” The other options describe either a lower-redundancy setup (such as a single autopilot) or a different category (like IIIB) or use a different altitude reference (DH instead of AH). Those correspond to different autoland certification levels and wouldn’t apply to Cat IIIA dual (Fail Operational). So, the choice that matches Cat IIIA dual (Fail Operational) with both autopilots active and A/THR on, giving 100 AH / 600 RVR, is the correct one.

The most important idea here is how autoland minimums depend on both the category of autoland and the level of redundancy (autopilot failure protection). For Cat IIIA with dual, fail-operational capability, the aircraft must be able to complete the landing even if one autopilot fails, so both autopilots remain engaged and auto thrust is required.

In this configuration, the specified minimums are 100 feet height above the runway (AH) with 600 meters (RVR) visibility, and both autopilots must be in use with A/THR engaged. This combination ensures the system can manage the descent, flare, and touchdown reliably using full redundancy, which is the essence of “Fail Operational.”

The other options describe either a lower-redundancy setup (such as a single autopilot) or a different category (like IIIB) or use a different altitude reference (DH instead of AH). Those correspond to different autoland certification levels and wouldn’t apply to Cat IIIA dual (Fail Operational).

So, the choice that matches Cat IIIA dual (Fail Operational) with both autopilots active and A/THR on, giving 100 AH / 600 RVR, is the correct one.