Well, they never ask all 5 at once, they ask a random 2 out of the 5, but you better know the answer to all 5, because if you answer incorrectly 3 times they lock the account and you must contact them to reset it. This is for State Farm, BTW.

The worst, though is my state's Benefits website. They use an 8 digit numbers-only password that expires every 90 days. You can't repeat any of the previous numbers that you've used. Keep in mind that this is a site that I may log into maybe once per year. I have never actually successfully entered this password after using it for 1 day, I've had to call for a reset every time.