Chapter 11 of 11 · ETO

ETO Orals & Practical Assessment

This is the assessment where the examiner watches for judgement under pressure rather than textbook recall — what you would actually do first when a board blacks out or an earth-fault alarm sounds, and why. Get the sequence and the reasoning right, and the exact regulation number matters far less than most candidates assume.

Worked examples2, fully stepped
Read time≈ 12 min
PrerequisiteNone

1. Answer with the sequence, not the fact

An oral assessment on electrical safety is not really testing whether you know the theory — it is testing whether you would act correctly, in order, with nobody checking your work as you go. The examiner already knows the answer to "is it safe to touch"; what they are listening for is whether you get there by the right route, because in a real engine room the route is what keeps you alive.

The route has a name, and it does not change with the equipment: isolate the supply, prove it dead, do the work, test before you touch or reconnect, restore power in a controlled way, and record what you did. Every scenario question the assessors ask — blackout, earth fault, a motor that will not start, a permit for HV work — is really the same sequence dressed up in different clothes. Answer with the sequence first and the specific fact second, and you are already answering the way a competent officer would think.

Isolate → Prove dead → Work → Test → Restore → Record the sequence behind every safety answer
The key idea

An assessor is not grading your electrical knowledge in isolation — they are grading whether you would still follow the sequence when nobody is watching and the pressure is on to get the plant running again quickly.

2. Blackout: the standard scenario

A total blackout is the scenario every assessor reaches for, because it compresses several decisions into a few seconds and shows whether you think in the right order under pressure. The first thing to establish, out loud, is not what caused it — it is whether the emergency generator has started and picked up the emergency switchboard. Until that is confirmed, everything else is secondary.

Once the emergency supply is confirmed, the next priorities are steering and the other essential services covered by the emergency board — fire pumps, navigation lights, communications — because these are what keep the vessel safe while you deal with the main board. Only after that does attention turn to the main switchboard itself, and even then the main generator or generators are brought back and loads restored in a controlled sequence rather than all at once, because a freshly-started machine can be tripped again by a sudden block load.

The detail that separates a pass from a near-miss answer is what happens next: before you attempt to bring the failed generator back into service, you find out why it tripped or stopped. Reconnecting without knowing the cause risks repeating the exact failure, possibly under load, and an assessor will usually probe this directly by asking what you would check before the second attempt.

The key idea

Recovery has an order — emergency supply, steering and essentials, then the main board — and the order does not skip the step where you find out why the plant failed in the first place.

3. Earth faults on an insulated system

Most ships' distribution systems are insulated from earth rather than solidly earthed, which is precisely why a single earth fault does not trip a breaker or blow a fuse — there is no complete circuit for fault current to flow through. An earth-fault monitor will raise an alarm and point to the affected phase or section, but the plant keeps running. That is a deliberate design choice, meant to keep essential services available at sea rather than blacking out the ship for a single fault, and it is worth being able to explain the reasoning in those terms.

What an assessor wants to hear next is what happens if that first fault is left alone. A second, independent earth fault on a different phase, anywhere else on the same system, now completes a path between two phases through the two earth points — effectively a phase-to-phase short circuit routed through the hull. That second fault is where the damage, the fire risk, or the loss of a second circuit actually happens, not the first one.

So the correct response to an earth-fault alarm is not to ignore it because nothing has tripped — it is to treat it as time-limited: locate it by systematic elimination, isolating sections or circuits in turn and watching the monitor; identify what can safely be isolated without losing essential services; and clear the fault before a second one can occur.

1 earth fault (insulated system) = alarm, no trip 2 independent earth faults = a short circuit through the hull

4. Fault-finding logic: motors and drives

"The motor will not start" is one of the most common practical or oral prompts, and the trap is guessing at a component instead of working through the circuit in order. The logic runs from the supply inward: confirm supply is present and correct at the starter, confirm the protection device has not tripped and is not the reason nothing is reaching the motor, confirm the control circuit is completing (interlocks, stop circuits, auxiliary contacts, remote/local selector) and only then suspect the motor itself. Working in that order stops you opening up a motor that turns out to have nothing wrong with it beyond a tripped overload or an interlock left open.

Variable-speed drives extend the same logic rather than replacing it. A drive that trips needs to be isolated by stage rather than assumed to be one single fault: the rectifier (incoming AC to DC), the DC link (the capacitor bank and its charging circuit), and the inverter (DC back to variable AC for the motor) can each fail independently, and the drive's own fault code usually points to which stage. Isolating and testing stage by stage, rather than condemning the whole unit, is both safer and far quicker to defend in an oral answer.

The key idea

Fault-finding answers score marks for the order of elimination — supply, protection, control circuit, then motor — not for guessing which part has failed first.

5. High-voltage work: isolate, lock, prove, discharge, earth, permit

High-voltage work carries its own version of the isolate-prove-dead sequence, extended because HV equipment can retain a dangerous charge and because the consequence of a mistake is far more severe. After isolating the supply, the breaker is racked out or physically withdrawn rather than just opened, and the isolation is locked off with your own personal lock so nobody else can re-energise it while you are working. A voltage-detecting instrument is then proved on a known live source before and after it is used to prove the equipment dead — proving the instrument is what stops a faulty tester giving you false confidence.

Two steps beyond that are specific to HV and are frequently the ones a weaker candidate forgets: discharging any residual capacitive charge in the cable or windings, and then applying earths to the isolated conductors before work begins. Only once the equipment is isolated, proved dead, discharged and earthed is it covered by a permit-to-work that names the equipment, the isolation points, and the person responsible.

None of this is optional because the fault "felt minor" or because operational pressure makes a quick reset tempting — an assessor will often set up exactly that pressure in the scenario to see whether you hold the sequence anyway.

The key idea

HV isolation is the LV sequence plus two extra, non-negotiable steps — discharge and earth — before a permit is issued and work begins.

6. Fit to return to service, and the training record book

Saying "I would just check it" is the answer that loses the most marks in this part of the assessment, because it names no actual test. A competent officer returning equipment to service after work can list what was checked: continuity of the conductors and connections, insulation resistance to confirm nothing is tracking to earth or between phases, correct polarity so nothing is cross-connected, and a function test carried out under controlled conditions before the equipment is put back to normal duty. Guards and covers go back on before the function test, not after, because testing exposed live equipment defeats the purpose of fitting the covers at all.

The final step is procedural rather than technical, and it is just as easy to lose marks on: the isolation is removed only by the person who applied it, or through a formal, recorded handover if that person is not available — never by whoever happens to want the plant running again. The whole sequence, from isolation to restoration, is then recorded.

The training record book is where the assessor's questions connect to paperwork you should already know well: it is signed evidence, task by task, that you have actually carried out or been assessed on each competence you are claiming, not a form filled in after the fact. An assessor unconvinced by a verbal answer will often ask to see the corresponding entry, so knowing what evidence supports each competence — and being honest about the gaps — is itself part of the assessment.

The key idea

"Fit for service" is a checklist you can name — continuity, insulation, polarity, function, covers, isolation removed by the applier, record — not a feeling.

7. Worked examples

The two walkthroughs below are the kind of layered scenario an oral or practical assessment actually uses — several decisions chained together rather than one fact to recall — with the reasoning set out the way you would need to state it to an assessor.

Worked example 1

Blackout recovery — order of action and why you would not reset a tripped generator blind

You are the sole ETO on watch aboard a 190 metre bulk carrier in open water when the main switchboard blacks out. The running diesel generator's breaker has opened on reverse-power protection, and the standby generator is set to auto-start. The chief engineer, coming up from the accommodation, asks you for a running commentary on what you are doing and why, in the order you are doing it.

Given

Main switchboard blacked out; running generator breaker opened on reverse-power protection Standby generator set to auto-start You are alone in the engine control room when it happens Chief engineer wants a spoken, real-time account of your actions and reasoning

  1. State what you check first.

    And why it comes before anything else: whether the standby generator has started and its breaker has closed onto the switchboard, restoring supply to steering gear and the other essential services.

  2. Explain that loads are not all reconnected at once.

    Order: essentials/steering (auto) → navigation & comms → large motors, one at a time

    Restore in a controlled order — essential services and steering already covered by the automatic transfer, then navigation and communication loads, then larger motors brought on one at a time — so a single newly-started generator is not block-loaded.

  3. Reason about the trip itself.

    A reverse-power trip means the generator was briefly motoring — drawing power from the board instead of supplying it — which points to a loss of drive from the prime mover (fuel, governor, turbocharger, shaft coupling) rather than an electrical fault on the board itself.

  4. State explicitly that you would not simply reset and re-close the tripped breaker.

    Reset & reclose without investigation → risk of an immediate repeat trip, possibly under load

    Reverse-power protection has done its job correctly; reconnecting without knowing why the set stopped driving the load risks an identical trip recurring, or bringing a genuinely faulty machine onto a board you have only just recovered.

AnswerConfirm the standby generator has started and taken the essential/steering load; restore remaining services in a controlled, staggered order; then investigate the cause of the reverse-power trip on the failed generator before attempting to bring it back — do not simply reset and re-close its breaker.

The trap: resetting and re-closing the tripped generator's breaker to "get it back online quickly" without first finding out why reverse-power protection operated.

Worked example 2

HV earth-fault trip on a cargo pump motor — isolation sequence and fitness for return to service

During cargo discharge aboard a product tanker, the No. 2 cargo pump's 6.6 kV motor breaker trips on earth-fault protection. The duty engineer, keen to keep discharge moving, suggests simply resetting the breaker and restarting the pump. As the ETO who would carry out any isolation and investigation, the assessor asks you to talk through what you would actually do.

Given

No. 2 cargo pump motor supplied at 6.6 kV, breaker tripped on earth-fault protection Duty engineer wants a quick reset and restart to keep discharge moving You would be the person carrying out the isolation and any fault investigation No isolation has yet been applied

  1. Explain why you would refuse the quick reset.

    Earth-fault protection has operated correctly to prevent a developing fault from getting worse, and reconnecting HV supply to a circuit with an unconfirmed fault risks re-energising a conductor with a breakdown to earth.

  2. Talk through the isolation itself.

    Isolate→rack out / withdraw breaker → lock off

    In order: isolate the supply, rack out or physically withdraw the HV breaker rather than just open it, and lock off the isolation with your own personal lock so it cannot be re-energised while you are working.

  3. State that before touching anything you prove your test instrument on a known live source, then use it to prove the motor and cable dead — proving the instrument is what stops a faulty tester giving you false confidence.

    Prove tester live → prove circuit dead → re-prove tester live
  4. Name the two steps that are specific to HV and are the ones most often missed.

    Discharge→earth down → issue permit-to-work

    Discharging any residual capacitive charge in the cable and windings, then applying earths to the isolated conductors, before the job is covered by a permit-to-work naming the equipment and the isolation points.

  5. Once fault-finding is complete and the motor is repaired.

    Describe what makes it fit to return to service: continuity and insulation resistance tests, correct polarity, guards and covers refitted, a function test, and the isolation removed only by the person who applied it — with the whole sequence recorded.

AnswerDecline the reset. Isolate and rack out the HV breaker, lock off, prove the tester, prove the circuit dead, discharge and earth it, then work under a permit-to-work. After investigation and repair, confirm continuity, insulation resistance, polarity and function, refit guards and covers, have the isolation removed by the person who applied it, and record the whole job before returning the pump to service.

The trap: treating an HV earth-fault trip like a routine LV nuisance trip and going straight for a reset, skipping the discharge-and-earth steps that HV isolation specifically requires.

Reference sheet
60-second recall
  1. State who removes an isolation — always the person who applied it, or a recorded formal handover, never whoever wants the plant running.
  2. One earth fault on an insulated system will not trip anything; a second, independent one is what causes the damage.
  3. Trace a fault supply-first, then protection, then control circuit, before you suspect the motor or drive stage itself.
  4. HV isolation adds two steps LV does not need: discharge, then earth — before any permit is issued.
  5. The training record book is signed evidence per task, not paperwork filled in afterwards — know what yours is missing.