According to the Safe and Secure policy, how long is a user locked out after three consecutive incorrect login attempts?

According to the Safe and Secure policy, how long is a user locked out after three consecutive incorrect login attempts?

• A. 5 minutes
• B. 10 hours
• C. 10 minutes
• D. 1 day

Answer: (C)

Security policies protect accounts by slowing down repeated login attempts. After three consecutive incorrect logins, the Safe and Secure policy enforces a brief lockout to deter brute-force guessing while keeping access manageable for legitimate users. The chosen duration is ten minutes, which provides a meaningful delay for automated attempts but isn’t so long that a real user is locked out for hours or days. A shorter window, like five minutes, might not sufficiently slow determined attackers who can resume attempts quickly. Much longer lockouts, such as ten hours or a day, would be overly punitive, leading to frustrated users and more help-desk inquiries.

Security policies protect accounts by slowing down repeated login attempts. After three consecutive incorrect logins, the Safe and Secure policy enforces a brief lockout to deter brute-force guessing while keeping access manageable for legitimate users. The chosen duration is ten minutes, which provides a meaningful delay for automated attempts but isn’t so long that a real user is locked out for hours or days.

A shorter window, like five minutes, might not sufficiently slow determined attackers who can resume attempts quickly. Much longer lockouts, such as ten hours or a day, would be overly punitive, leading to frustrated users and more help-desk inquiries.