The patch has been applied and the OEM confirms remotely that the system is now running the corrected software version. What verification should happen before fully resuming DP-critical operations?

A. Verification should be skipped to save time since the client is waiting

B. No further verification needed since the OEM has confirmed the patch was applied successfully

C. A functional test of the changeover between DP Computer 1 and DP Computer 2 (and ideally a check of the redundant network paths) while NOT in a safety-critical phase of operation, to confirm the patch resolved the issue and the changeover behaves correctly — trusting a remote software confirmation alone, without a practical verification on this specific vessel's hardware, is not sufficient given how today started

D. A full annual DP trial must be repeated in its entirety before any further operations, regardless of the narrow scope of the original fault

A. The vessel should immediately drop anchor regardless of changeover success

B. No automatic action occurs for a software fault; only hardware faults trigger changeover

C. The system should automatically switch over to DP Computer 2 (the standby/redundant controller) seamlessly, with thrusters continuing under DP2's control without interruption; the DPO must verify the changeover actually occurred cleanly, that DP2 has correct position and reference data, and that no thruster commands were lost or duplicated during the transition

D. Thrusters automatically default to maximum power output until manually reset

A. It must be a power generation fault since any thrust transient implies an electrical issue

B. It must be a sensor fault since thrust is downstream of position data

C. The category does not matter — all DP failures are addressed identically regardless of cause

D. This is a control-system/software failure category, distinct from power generation or sensor failures — correctly identifying the category matters because the troubleshooting, the people who need to be involved (DP system OEM/software support, not just the electrical engineer), and the appropriate caution around trusting the "recovered" system are all different from a power or sensor event