A smart building uses CO₂ sensors in every office to control the ventilation rate. When CO₂ rises above 1,000 ppm (indicating high occupancy), the HVAC system increases fresh air supply. When rooms are empty, ventilation drops to a minimum. This is a cyber-physical system. Identify the four key components that make it a CPS rather than a simple timed ventilation schedule.

A programmable timer, an on/off switch, a power meter, and a thermostat — all controlled by the building manager Sensors (CO₂ detectors), a computational controller (building management system), actuators (variable-speed fans and dampers), and a physical process (air quality in the rooms) — all in a continuous feedback loop An internet connection, a mobile app, a cloud server, and a manual override switch accessible to occupants Energy meters, billing software, a payment gateway, and building occupancy records

A smart grid operator sends a demand response signal to enrolled large industrial consumers at 17:30 on a winter weekday, asking them to reduce consumption by 15% for two hours. The industrial customers comply. What underlying problem does demand response solve, and why is it preferred over an alternative solution?

It prevents voltage collapse by increasing grid frequency during periods of excess renewable generation It manages the evening peak in electricity demand by shifting flexible loads, avoiding the need to build and operate expensive peaking power plants that would otherwise run only a few hours per year It eliminates the need for transformers in the distribution network by balancing phases automatically It reduces metering costs by allowing industrial customers to self-report their consumption

A city installs 50,000 rooftop solar panels on residential homes. Each panel system can feed excess power into the grid. The grid operator reports that this makes supply-demand balancing significantly harder than when there were only large power stations. Analyse the core engineering challenge this creates.

Solar panels generate DC power which must be converted, and 50,000 converters introduce harmonic distortion that overloads transformers Power flow becomes bidirectional and variable — the grid was designed for one-way flow from large stations, and 50,000 small intermittent generators require real-time monitoring and new control strategies to maintain voltage and frequency stability The panels reduce overall electricity consumption so much that power stations run inefficiently at low partial-load Insurance and liability for 50,000 individual generation systems creates unmanageable administrative complexity

SCOOT (Split Cycle Offset Optimisation Technique) is an adaptive traffic signal system used in many UK cities. It uses inductive loop detectors embedded in the road at each approach. How does SCOOT differ from a fixed-time signal plan, and what is its mechanism for optimising traffic flow?

SCOOT uses CCTV cameras and computer vision to count vehicles and sets signal phases based on the highest-priority queue at each moment Unlike fixed plans, SCOOT continuously measures actual vehicle queue lengths and arrival rates using loop detectors, and adjusts signal cycle times, splits, and offsets every few seconds to minimise total delay across the network SCOOT replaces traffic lights entirely with dynamic lane markings that direct vehicles through intersections without stopping SCOOT uses GPS data from mobile phones to predict future demand and sets long-range fixed plans accordingly

A city creates a digital twin of its entire downtown area, incorporating real-time data from 10,000 sensors (air quality, footfall, traffic, energy use). City planners propose a new 40-storey tower and use the digital twin to assess its impact before planning permission is granted. Identify TWO distinct planning benefits the digital twin provides that a conventional planning process cannot.

Automatically approving planning applications that meet all regulations and flagging those that do not, removing the need for human planning officers Simulating the tower's shadow and wind effects on surrounding streets in real time across all seasons, and modelling knock-on effects on traffic patterns and pedestrian flows before any construction takes place Providing a 3D visual model for public consultation and generating the planning application documents automatically Calculating the structural loads on the tower foundations and selecting the most cost-effective foundation type

A smart city deploys Automatic Number Plate Recognition (ANPR) cameras on 2,000 streets. The stated purpose is congestion charging. However, the database also logs the time and location of every vehicle journey. A civil liberties organisation argues this constitutes mass surveillance. Which GDPR principle is most directly relevant to their concern?

Data minimisation — the cameras collect too many images and should photograph fewer vehicles to reduce data volume Accuracy — the ANPR system may misread plates and therefore process incorrect personal data Purpose limitation — data collected for congestion charging must not be retained or used for other purposes such as tracking individuals' movements without separate legal basis Storage limitation — the data should be deleted after 24 hours to comply with GDPR retention rules

In 2015, hackers caused a blackout affecting 225,000 customers in Ukraine by compromising the SCADA systems of three power distribution companies. The attack used spear-phishing emails to gain network access, then remotely operated circuit breakers. What class of vulnerability did this attack exploit, and what mitigation would have been most effective?

Physical security vulnerability — attackers entered the substations in person and manually opened the breakers Supply chain vulnerability — the SCADA software contained a backdoor installed by a compromised manufacturer IT/OT convergence vulnerability — operational technology (circuit breakers) was networked with information technology accessible from the internet; air-gapping OT networks from corporate IT and the internet would have prevented remote access Cryptographic vulnerability — the power company used weak encryption on data transmissions that attackers decrypted

A city's Building Management System detects that the chiller plant in a large office block is consuming 18% more electricity than the model predicts for the current outdoor temperature and occupancy. The BMS sends an alert to the facilities team before any visible failure occurs. What maintenance philosophy does this represent, and how does it differ from traditional approaches?

Reactive maintenance — the BMS has identified a fault and is reporting it for immediate emergency repair Preventive maintenance — the BMS is following the manufacturer's schedule to inspect the chiller every quarter Predictive maintenance — using real-time performance data to identify deteriorating conditions before failure, replacing both time-based preventive maintenance (fixed intervals) and reactive maintenance (fix after breakdown) Corrective maintenance — the chiller has failed and the BMS is alerting the team to restore operation

A smart city data platform integrates datasets from: buses (GPS tracks), electricity meters (15-minute consumption), air quality sensors (NO₂, PM2.5), and social housing maintenance logs. A researcher cross-references these to show that NO₂ is highest within 200 m of bus routes in social housing areas. Residents in these areas have worse respiratory health. What does this analysis demonstrate about urban data platforms beyond what any single dataset could show?

Big data processing is faster than traditional databases and can analyse more records simultaneously Cross-domain integration reveals systemic inequalities and causal relationships between transport, environment, and health that are invisible when datasets are siloed in separate departmental systems Smart city data platforms can replace manual surveys and public consultations because sensor data is more reliable than self-reported information Real-time data is always superior to historical records for making planning decisions

A smart city's facial recognition system is trained on data that is 78% male and 85% white due to the demographics of its training dataset. It is then deployed to identify persons of interest at a major sports arena. A civil engineer reviewing the system flags this as an equity concern. What specific technical and social harm does this bias create?

The system will slow down when processing faces of women and people of colour because it requires more computation to match them The system will have higher false-positive rates for women and people of colour, leading to disproportionate wrongful stops and surveillance of these groups — compounding existing inequalities The system will refuse to process images of underrepresented groups and generate error messages The system will correctly identify persons of interest but take longer to return results for underrepresented groups

A local authority wants to roll out a smart waste collection system where bins have sensors that signal when full, and lorries collect only full bins rather than on a fixed schedule. A community group in an area with low smartphone ownership and limited internet access raises concerns. Which smart city principle does this highlight?

Sensor reliability — IoT bin sensors fail frequently in harsh weather and will lead to missed collections in affected areas Data privacy — bin sensors may reveal residents' consumption habits and should not be deployed without consent The digital divide — residents without smartphones or connectivity cannot access the sensor data or benefit equally from the optimised service, and may be deprioritised if the algorithm weights areas with less digital engagement Vendor lock-in — once the council buys sensors from one manufacturer, it cannot switch to a competitor's system

A city's urban data platform holds integrated datasets on transport, utilities, health, and social services. The city council must decide who may access which data and for what purposes. Three parties request access: a commercial property developer (to identify high-footfall locations), an academic researcher (to study air quality inequalities), and the city's emergency planning team (to model evacuation routes). Using data governance principles, rank these requests by appropriateness and explain the decisive factor.

All three requests should be denied equally — city data should never be shared with external parties for any reason Commercial developer (highest) — tax revenues from development fund the city's smart infrastructure; researcher (medium); emergency planning (lowest) — government already has its own data systems Emergency planning (highest) — direct public safety mandate; academic research (medium) — public benefit, but requires ethical oversight and anonymisation; commercial developer (lowest) — private profit motive conflicts with the public-interest basis on which data was collected All three requests are equally appropriate and should be approved simultaneously under open data principles