That is how many time to break the answer to the security question, not the passwords. The security questions have a weaker hashing function.