4.2 鲁棒性与故障