Security Questions are either Secure or Memorable, but never both.

http://static.googleusercontent.com/media/research.google.com/en/us/pubs/archive/43783.pdf

get rid of them!

Use something that's actually secure, like two-factor authentication.