If support reps give enough information away over the phone to let someone guess a security question, there is nothing you can do to protect yourself from them.