But I assume they might use one of the schemes used by banks when setting up online accounts, or even by the TSA when you forget your ID and want to board a plane. They look at public/commercial records to come up with questions that only you should be able to answer.
Stuff like "DMV records show you own a Toyota Camry, what is the model year?," "which of these best describes your monthly payment on your mortgage?" or "which of these lenders holds one of your student loans?"