What is the stated policy for limiting repeated access attempts before a lockout occurs?

What is the stated policy for limiting repeated access attempts before a lockout occurs?

• A. Five attempts before lockout.
• B. Three attempts before lockout.
• C. No limit on attempts.
• D. Lock out after six attempts.

Answer: (D)

Limiting repeated access attempts is a security control to stop brute-force login guessing. The policy sets a maximum number of consecutive failed logins, and once that limit is reached, the account is locked to prevent further attempts for a period or until reset. The stated policy—locking out after six failed attempts—directly expresses that threshold, balancing protection with user usability. If the limit were lower (for example, three or five), it would lock out sooner and be more disruptive for legitimate users; if there were no limit, repeated guessing could continue unchecked. The six-attempt lockout matches the described approach in this scenario.

Limiting repeated access attempts is a security control to stop brute-force login guessing. The policy sets a maximum number of consecutive failed logins, and once that limit is reached, the account is locked to prevent further attempts for a period or until reset. The stated policy—locking out after six failed attempts—directly expresses that threshold, balancing protection with user usability. If the limit were lower (for example, three or five), it would lock out sooner and be more disruptive for legitimate users; if there were no limit, repeated guessing could continue unchecked. The six-attempt lockout matches the described approach in this scenario.