Formal Reasoning on Fault Coverage of Fault Tolerant Techniques: a Case Study