When configuring a security device so that, if the device itself fails, it will block all traffic rather than let it pass, which failure mode should you select?
Fail-closed mode forces a security device to deny all traffic whenever the device loses power or otherwise becomes non-functional. This default-deny stance preserves the organization's security posture. By contrast, fail-open permits all traffic during a failure, prioritizing availability over security, and fail-safe or fail-soft have different goals such as life safety or graceful degradation.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the difference between fail-closed and fail-open modes?
Open an interactive chat with Bash
What types of security devices commonly use fail-closed configurations?
Open an interactive chat with Bash
When would fail-open mode be preferable to fail-closed?