You specify the number of security questions that users must answer during enrollment or when they access the Self-Service Console for the first time, and the number of questions that users must answer correctly during authentication. If the total number of security questions specified for enrollment exceeds the number of questions specified for authentication, the user can choose which questions to answer for authentication.
In the Security Console, click Setup > System Settings.
Click Security Questions Requirements.
In the Enrollment field, specify the number of questions users must answer during enrollment. Modifying this setting does not affect users who are currently enrolled.
In the Authentication field, specify the number of questions users must answer correctly during authentication.