...
The answers to Security Questions are easily harvested from social media and other places. WSU will likely discontinue support for Security Questions in the future. Security Questions cannot be used as MFA, or for resetting a forgotten password. Previously, Security Questions had to be configured for all accounts.
Does not require an app on a mobile device- Does not rely on specific browser capabilities to work
Poor resistance to Phishing attacks- Extremely vulnerable to low skill social media attacks.
- Does not rely on possession of a any registered device.
How to Get Security Questions
Security Questions are built into Okta and do not require any 3rd party software. These are configured during account onboarding.
How to Set Up
Follow these steps to set up your Security Question in Okta
...
Security Questions are only used in special cases such as password reset, and are not available as methods for MFA.
...