After the maximum number attempts have failed, which of the following could set an account to lockout for 30 minutes?
Which process should be followed before implementing the new routine on the production application server?