If no account name has been determined at this point in the testing, the tester should use the methods below to attempt to discover a valid account name.+The first test that must be performed is to test that an account does indeed lock after a certain number of failed logins.