The user's question and answer are required to reset the password. As a security best practice, users should reset their ...