Security questions are used by password recovery functions and can be used by applications for additional layers of verifying user identity.
There are 10 security questions. The minimum number of questions that must be answered is set on a domain-by-domain basis by the Number of Security Questions Required policy. In the following example, the minimum number is 3.
Users who do not have the minimum number of questions answered will be continually prompted to fill out their questions each time to log into a web application.

To add or make changes to your Security Questions:
Enter answers for three of these questions.
Click Save.