One back-up unit (generator, UPS, chiller) for every N active units; single failure is tolerated