Gathering Requirement for Challenge Questions in Identity Management Systems

As part of the IAM implementation an important security key component is the Challenge questions. Next you’ll see some of the question you need to start gathering to narrow down your requirements.

Does the company need challenge/Answer question implementation?
Can you customize challenge/response questions?
Who provides predefined questions?
Does the User has a choice of predefined questions?
Number of question user needs to setup?
Number of correct answers user must enter to allow access?
Do we need to support the question in another language?
Is it English the default language for the questions?
Do you want to allow to the user supplied questions?
How many questions must answer the user?
Do you want to display the questions in Random mode?
Do you want to display the questions in Round Robin mode?
Can the authentication question answers contain words from the associated question?
Do you want to allow duplicate answers?
What question do you want to implement?

Some of the common questions used are:

o What is the name of your favorite pet?
o What is your favorite travel destination?
o What is your mother’s maiden name?
o What is your favorite color?
o What is your favorite sport?
o What is the last name of your favorite author?
o What is your favorite animal?
o Where is your favorite place to relax?
o What is the first name of your favorite actor?
o What is your favorite film?
o What is your favorite hobby?
o What was the name of your favorite childhood pet?
o Who is your favorite author?
o What country would you like to visit?
o What was the last name of your childhood best friend?
o Where did you meet your spouse for the first time?
o Last name of your favorite elementary school teacher?
o Who is a famous person you’d most like to meet (living/dead)?
o What is the farthest from home you have traveled?