According to the 'Safe and Secure' security slick, how long is a user locked out after entering incorrect login credentials three consecutive times?

According to the 'Safe and Secure' security slick, how long is a user locked out after entering incorrect login credentials three consecutive times?

• A. 15 minutes
• B. 1 hour
• C. 24 hours
• D. 10 minutes

Answer: (D)

A lockout after several failed logins is a protective step to slow down potential brute-force attempts while keeping access practical for legitimate users. In this scenario, the system imposes a short cooling-off period of ten minutes after three consecutive incorrect credentials. This duration strikes a balance: it reduces the chance of automated guessing within a small window, but it isn’t so long that a user who simply forgot their password or mistyped repeatedly is kept out for hours. Longer lockouts like fifteen minutes, an hour, or a day would create unnecessary friction for normal users and aren’t as effective for this balance. After ten minutes, the user can try again or reset the password if needed.

A lockout after several failed logins is a protective step to slow down potential brute-force attempts while keeping access practical for legitimate users. In this scenario, the system imposes a short cooling-off period of ten minutes after three consecutive incorrect credentials. This duration strikes a balance: it reduces the chance of automated guessing within a small window, but it isn’t so long that a user who simply forgot their password or mistyped repeatedly is kept out for hours. Longer lockouts like fifteen minutes, an hour, or a day would create unnecessary friction for normal users and aren’t as effective for this balance. After ten minutes, the user can try again or reset the password if needed.