The following web configuration file makes both an email address and security question and answer optional.
File: Web.Config
name="MyMembership"
type="System.Web.Security.SqlMembershipProvider"
connectionStringName="LocalSqlServer"
requiresQuestionAndAnswer="false"
requiresUniqueEmail="false" />
If you add the web configuration file to your application, then the CreateUserWizard control does not render fields for a security question and answer.