Personally I don't believe using preset security questions should ever be allowed. People should be allowed to type their own security question and answer.