The system is initially delivered with Two-factor authentication set "on", and Challenge Questions set "off". You can change either or both of these settings in Authentication Scheme Preferences.
Click 'Play' to watch a short demo of how to change your organization's authenication scheme preferences.