A device whose design employs duplication of failure-prone components so as to ensure the greatest possible availability is known as: