Useless for the intended purpose, but when you login to your bank's website from a different IP (or something similar) and it triggers the security question - t

Useless for the intended purpose, but when you login to your bank's website from a different IP (or something similar) and it triggers the security question - then you have it without making it something that someone else can figure out.