Are the checks lenient?

Would brute-force get rejected? I forgot my password on a site, and for reissue they ask for my DOB—but I entered it wrong and can’t remember. I asked for a brute-force bot, but they rejected the code. GLM’s checks are lighter though—how does it handle this?