The security manager is in the process of writing a business case to replace a legacy secure web
gateway so as to meet an availability requirement of 99.9% service availability. According to the
vendor, the newly acquired firewall has been rated with an MTBF of 10,000 hours and has an
MTTR of 2 hours. This equates to 1.75 hours per year of downtime. Based on this, which of the
following is the MOST accurate statement?

A.
The firewall will meet the availability requirement because availability will be 99.98%.

B.
The firewall will not meet the availability requirement because availability will be 85%.

C.
The firewall will meet the availability requirement because availability will be 99.993%.

D.
The firewall will not meet the availability requirement because availability will be 99.2%.