There is no validation on this page. It looks like it used to be there, but the server validation server behavior has been deleted.
you will need to add it back, go to tyhe Server Behaviors panle, click the plus button and select webassist -> Validation -> Server validation.
Use Like Entry validation, for the server variable click the lightning bolt and select the security question form element, for the comparison, select the security question session variable.