The system is initially delivered with Twotwo-factor authentication set "on", and Challenge Questions challenge questions prompting at login set "off".  You can change either or both of these settings in Authentication Scheme Preferences.Preferences.

Click 'Play' to watch a short demo of how to change your organization's authenication scheme preferences.