[jdbernard]

Regarding secret questions: they are basically a second set of weak passwords that tend to be impossible for a user to remember, but easier for an attacker to find out. They are often based on public information (e.g. mother's maiden name), information that is semi public (lots of people know where I went to school), or just not difficult to guess.