The answers to challenge questions are very secure. We use SHA 256 with salting and obfuscation by default.