

So-called “security questions” like these are prohibited under various standards (there’s a NIST one that I can’t remember exactly, and OWASP ASVS) because they’ve always been really terrible at verifying it’s actually you answering them, and not just someone who happens to know the answer. Mother’s maiden name being the notorious example.


Yeah but from an interviewing perspective it’s a win-win. Either the guy answers the question for those elections more clearly, showing that he only has a problem answering the one about 2020 and therefore clearly doing it because of the orange man, or he still refuses and he looks like he can’t answer simple questions.