Can someone explain to me how this actually provides security? The point of a CAPTCHA is to prevent robots from using the site. If a hacker knows that the security question is just asking for a word about a brand, he can simply program his robot to pick a word at random that could apply to any brand. How does responding to this prove you're human?