That's why I generally use random noise for my actual password, but random sets of 4 - 6 words for security questions. Both generated by 1Password and stored there. At least with a random set of words, they're something you can communicate verbally over the phone.