Maybe this would be more appropriate if the user was forced to set his own examples, though it'd be difficult to enforce a high level of 'challenge' to this test, if such a thing can be measured. The other problem with is that if you friends set their profiles to public, they help defeat your security.