The system is initially delivered with Two-factor authentication set "on", and Challenge Questions set "off".  You can change either or both of these settings in Authentication Scheme Preferences.

Click 'Play' to watch a short demo of how to change your organization's authenication scheme preferences.