Adding or Updating a Security Question If you use a password reset policy, you must add at least one security question.