Lockout duration is defined as:

• A. The amount of time (in minutes) an account remains locked.
• B. The time until a password must be changed.
• C. The time allowed for password reset completion.
• D. The time until a user can request another password.

Answer: (A)

Lockout duration is the length of time an account remains locked after failed login attempts. It’s part of the account lockout policy and serves to slow brute-force attempts by preventing further login trials for a set period. The value is usually measured in minutes or hours, and after those minutes or hours pass, the account is either automatically unlocked or can be unlocked by an administrator. This is different from password expiration, which is the time before a user must change their password, and from the time allotted to complete a password reset or to request another password.