This, so much this! It really annoys me that sooo many sites all ask questions from the same pool of stupid biographical data, thereby making guessing them almost trivial for people like vengeful ex wives and rogue IT staff at any random website that collects password reset questions.
Mother's maiden name? "handlebar mustache"
First pet's name? "furious green ideas"
Granted, I don't tend to pick what I'd call really all that "secure" passwords for them, but I sure as hell don't give them real answers. Hell, half the questions they ask, I don't even know the right answer - "College roommate's home town"??? Seriously? WTF, I couldn't stand the guy, you can sum up the entirety of our conversation with "can you please wash your bedding this month?" and "I told you you couldn't make bacon in a hot-pot!"