Instead of using the useless default Knowledge Based Questions choose the Access Code option. Create your own code that you securely send to your client. This has been working for me.
