The most insane security question I've encountered is on united.com where they have you select your question _and answer_ from a dropdown.
The list of possible answers can be very long. When they don't recognize your device, you select the answer from a subset.