It's a security measure to see if you're logging in under strange circumstances or an automated browser using stolen credentials or something. Some sites will ask security questions only if they see a new device or IP or geolocation, for example. Incognito just means empty cache and cookies, that's not that suspicious on it's own given all the other details.