A company deploys two firewalls in a cluster. The primary firewall handles all traffic while the second unit stays idle, only taking over if the primary fails. During normal operation, the secondary firewall processes no production traffic. Which redundancy configuration does this describe?