Are security questions no longer required for Apple ID account security?
Accounts with two-factor authentication enabled do not require or use security questions.
Two-factor authentication for Apple ID - Apple Support

Do I still need to remember any security questions?
No. With two-factor authentication, you don't need to remember any security questions. We verify your identity exclusively using your password and verification codes sent to your trusted devices and phone numbers. When you enroll in two-factor authentication, we keep your old security questions on file for two weeks in case you need to return your account to its previous security settings. After that, they're deleted.

If you are enabling two-factor authentication on an existing account, you may need to answer the security questions to complete the process.

You might be asked to answer your Apple ID security questions.