Add to that list that they force you to choose one of their predetermined password recovery questions, none of which are anything you might intuitively remember (United.com is a classic example)
Alternatively questions that, if you have been compromised are easy to come by - or questions that could easily compromise you're information further.
"What street did you grow up on?" If someone has my password without my knowledge, they can easily figure this out too.
"What is your mothers maiden name?" Really? I thought this was supposed to protect me, not make me more susceptible to having my identity stolen if this account gets compromised.