What is the definition of lockout threshold?

• A. The number of bad password attempts before the account is locked out.
• B. The time before a locked account becomes re-enabled.
• C. The maximum password length allowed.
• D. The minimum password age before change.

Answer: (A)

Lockout threshold is the limit on consecutive failed authentication attempts that triggers an account lock. When the number of bad password attempts reaches this limit, the system blocks further logins to prevent brute-force guessing. The exact number varies by policy, but it’s typically a small count like two to five attempts. This is different from the lockout duration, which is how long the account remains locked, and from other password rules such as maximum length or minimum age.