& = puts xlock in the background so the shell can continue parsing commands without waiting for xlock to finish.
loginctl = sends the command on the right to the login manager.
suspend = self-explanatory.
Thus, upon waking up from suspend, your machine is still locked up by xlock. Simple.