The best suggestion I've seen for handling security questions is to use the same stupid response for all of them. Mum's maiden name? 'waffles'. City of birth? 'waffles'. Brand of your first car? 'waffles'. No-one's going to glean that from the internet, and it's going to be difficult for you to forget once you've formed the habit.