How can we have reached the stage that the last line of defence of the sanctity of
personal information (without two factor
authentication) rests with being one of the few people to know the city in which one's secondary school is located (assuming, of course, that that
question and answer has not already been compromised)?
Basically, you need to use voice
authentication while taking the course (you can do this over the phone usually) and you may be asked a bunch of random
personal questions with a time limit to answer.