Can anyone point me in the direction of sample security questions that could
be used to verify a user's identity if they don't have an email address and
have forgotten a password? EG Mother's maiden name, first school etc etc.
I think best practice would be to let a users set the question themselves,
but in this case we need to offer a set of questions for the user to choose