Which security control configuration ensures continued access to a resource in the event of a failure?

Which security control configuration ensures continued access to a resource in the event of a failure?

• A. Fail-open
• B. Fail-closed
• C. Packet filtering firewall
• D. Appliance firewall

Answer: (A)

The main idea is how a security control behaves when it fails. Fail-open means that if the control stops working, it allows traffic to pass or access to continue, preserving availability of the resource. This is chosen when what you need most is uninterrupted access, even if it temporarily raises risk. In this scenario, that behavior ensures continued access during a failure, which is why fail-open is the best-fitting configuration. A fail-closed approach, by contrast, would block access when the control fails, preserving security but disrupting availability. The other options describe types of security devices rather than how they behave on failure, so they don’t address the question of maintaining access during a failure.

The main idea is how a security control behaves when it fails. Fail-open means that if the control stops working, it allows traffic to pass or access to continue, preserving availability of the resource. This is chosen when what you need most is uninterrupted access, even if it temporarily raises risk. In this scenario, that behavior ensures continued access during a failure, which is why fail-open is the best-fitting configuration.

A fail-closed approach, by contrast, would block access when the control fails, preserving security but disrupting availability. The other options describe types of security devices rather than how they behave on failure, so they don’t address the question of maintaining access during a failure.