Configuring security question for MFA
When security question is used with MFA enabled, users will be prompted upon their first login (after the setting change) to pick 3 possible questions and provide answers.
They will then be prompted with one of the questions for authentication and will be prompted with one of the questions on any subsequent login.

Users can reset their security questions by logging directly into the Forcepoint ONE SSE portal and clicking Edit Profile.

