Most banks get their security questions from a company called RSA. Marc Gaffan, RSA’s director of product marketing, says 70 to 80 percent of American banks—including Bank of America, Wachovia ...