A failover WAN link for the courthouse activates during outages but intentionally bypasses the primary firewall and IDS to 'guarantee connectivity.' Which principle should redesign follow?
Select an answer to reveal the explanation.
Short Explanation
Failover that skips the firewall is a secret tunnel that only opens on your worst day—or whenever someone forces it. Redundancy should keep the same security seatbelt on, not rip it off to go faster.
Full Explanation
Redundant components and paths must remain within security policy. Failover links that bypass filtering or detection create alternate attack paths and undermine defense-in-depth. Secure design engineers resilient connectivity that preserves inspection, access control, and monitoring rather than trading those controls for uptime.