vB does have a "security question" feature, I think.