Just give the wrong answer and keep track in your password tracker. At least social engineers can't figure that out.