-snip-
Instead just use an email, security questions aren't really needed if you use a strong email.
As we have seen recently with the GMX related hacks your email might not as strong as you think it is. The security of your email depends on a 3rd party. They might do a poor job. Especially if you are not even paying them for their services, they might be lacking the motivation and means to thoroughly protect their servers and customers. Google seems to be different in that regard though.