A security process used by financial institutions where users are asked to answer at least one "secret" question before performing a financial transaction or recovering an account.