StudyToCert

All certifications / Security+ / Lessons

CompTIA Security+ SY0-701 · Domain 3: Security architecture

Fail-open vs fail-closed

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Every security device and control eventually fails: power is lost, software crashes, a sensor breaks or a license expires. The failure mode decides what happens then. A fail-open (fail-safe in some contexts) device allows traffic or access when it fails, keeping things working but without protection. A fail-closed (fail-secure) device blocks traffic or access when it fails, keeping things protected but stopping legitimate use. Choosing between them is a deliberate trade-off between availability and security, and Security+ tests whether you can make that choice for a given scenario.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Security+ for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Security+ study plan