Apple iCloud gives you three options for verification; SMS, code via email and code via phone call.
Much easier does not take a rocket scientist to implement.
Giving people the option to hand over all their personal info for 'secret' questions is insulting.