Security questions are basically passwords and thus suffer from the same issues.

I'd a neat (imo) idea for this, though not everyone agreed: http://news.ycombinator.com/item?id=4349116