The system is initially delivered with two-factor authentication set "on", and challenge question prompting at login set "off".  You can change either or both of these settings in Authentication Preferences. 

Please look through the PowerPoint for step-by-step instructions.

Demo Video