Just to double check that it is the Security Question failing, find the following code:
if ($WAFV_Errors != "") {
PostResult($WAFV_Redirect,$WAFV_Errors,"contactZonaPromo");
}
and change it to:
if ($WAFV_Errors != "") {
die($WAFV_Errors);
PostResult($WAFV_Redirect,$WAFV_Errors,"contactZonaPromo");
}
this will write a comma separated list of numbers to the screen representing the validations that failed, please post that list back so I can look into this further.