Which of the following?

A website locks a user’s account after three unsuccessful login attempts. This precaution prevents which of the following?
A. Shoulder surfing
B. Phishing
C. Spam
D. Password cracking