Which security measure might a system implement when detecting unusual activity from a device, resulting in access denial with a message prompting the user to retry later?
a. Two-factor authentication
b. CAPTCHA verification
c. Device fingerprinting
d. IP address whitelisting