How Should Safety and Logical Controls Be Configured During System Failures?

SY0-701 By islever Editorial Last updated

Short answer

C Safety controls should fail open.

Question

Security controls in a data center are being reviewed to ensure data is properly protected and that human life considerations are included. Which of the following best describes how the controls should be set up?
  1. Remote access points should fail closed.
  2. Logging controls should fail open.
  3. Safety controls should fail open. Correct Answer
  4. Logical security controls should fail closed.

Key Takeaways

Assesses the fail-safe/fail-open dichotomy, where the common trap involves applying data-centric fail-closed logic to physical safety scenarios that explicitly require fail-open behavior.

This question evaluates the fail-safe versus fail-open design principles in security architecture, with community consensus confirming that safety mechanisms must prioritize human life by defaulting to an open state during failures.

Common mistake: Candidates often select Option D because logical security controls do indeed fail closed, but they miss the question’s explicit directive to prioritize human life considerations, which overrides standard data protection defaults.

Expert Analysis

Why the Answer Is Correct

Safety controls in any facility, including data centers, must be designed to fail open to prioritize human life above all else. In the event of a power loss, system malfunction, or emergency, mechanisms like fire suppression releases, electromagnetic door unlocks, and ventilation shut-offs must activate or open automatically. This fail-open configuration ensures that personnel can evacuate safely and that hazards are mitigated immediately, aligning with occupational safety standards and risk management frameworks.

Why the Other Options Are Wrong

Option A is incorrect because remote access points and network boundaries should fail closed to prevent unauthorized lateral movement during outages. Option B misapplies the concept; logging controls are informational and do not operate on a fail-open/closed spectrum, as their primary goal is audit trail continuity rather than access control. Option D describes a valid principle for logical security controls like firewalls and ACLs, but it contradicts the question’s specific emphasis on human life and physical safety, making it the secondary consideration rather than the best overall answer.

Community Comment Notes

The community heavily emphasizes that human life takes precedence over data protection in exam scenarios involving safety priorities [1]. Several users note that while logical controls correctly fail closed, the prompt’s phrasing directly targets physical safety protocols, confirming Option C as the intended answer [4]. Additional feedback clarifies that fail-open activates emergency measures like sprinklers and alarms, whereas fail-close secures perimeters against threats [3]. This consensus reinforces the need to read for contextual cues like human life considerations before selecting technical defaults.

Official Reference

https://www.osha.gov/emergency-preparedness

This link opens the official vendor documentation in a new tab.

Exam Strategy

Always prioritize keywords like human life, safety, or emergency over standard data-protection rules when configuring controls. Remember that logical and access controls must fail closed to protect assets, while physical safety systems must fail open to preserve lives, a distinction frequently tested across Security+ domains.

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 7 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 7

  1. dbrowndiver 👍 6 Answered C
    Safety controls failing open is a critical design principle that ensures human life is prioritized in the event of a failure. This principle applies to situations where failing open provides an immediate safety benefit, such as allowing exit doors to unlock automatically during a fire.
  2. Yoez 👍 4 Answered C
    C. Safety controls should fail open: Safety controls, such as fire suppression systems or emergency exits, should indeed fail open. This means that in the event of a failure or malfunction, they should default to a state that ensures safety, such as allowing people to exit a building or mitigating hazards.
  3. Mehsotopes 👍 3 Answered C
    Fail Open: Activates specified controls; in this case, safety measures such as sprinklers, or alarm systems to ensure the safety of staff members, & system devices. Fail Close: Locks controls such as access to the perimeter, & devices to protect from exfiltration.
  4. MarysSon 👍 2 Answered C
    The question says human life considerations are included. Human life is the main concern. C is the only answer that adequately addresses the safety of the workforce.
  5. Cristian_Ykz 👍 1 Answered D
    I think the key to the answer lies in "Logical Security Controls" Logical security controls (such as firewalls, ACLs, authentication, etc.) must fail-safe (close) upon failure to ensure that the system remains secure and unauthorized access is blocked. This helps proactively protect critical data and resources, reducing exposure to risk. If there were no specification of the control applied, this would not be a good option.
Show 2 more comments
  1. 41c27e6 👍 1 Answered D
    Logical security controls. If there is a failure in the security system (such as a logical security control), the system should default to a more secure state, blocking any unauthorized access
  2. Shaman73 👍 1 Answered C
    C. Safety controls should fail open.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide