The security challenge question on Bank of America’s site seems innocuous:

In what year (YYYY) did you graduate from high school?
But, what if the user didn’t graduate high school? (Little known fact: I didn’t graduate high school, so I’m a little sensitive to this question.)
Should the user enter the date they would’ve graduated high school? [...]