Security Questions requirements are too restrictive
I've just rolled out AD Self Service at my organization. I keep getting users reporting that for several of the questions there are restrictions to have 5+ characters when the question should realistically allow for fewer. For example if a user selects "What is your favorite color?" as a question, it requires 5 or more characters. So completely valid answers: Red, Blue, etc... will not work. I understand the need to require a minimum character length so that fields are not left blank, but not allowing valid answers is frustrating for users. Given that the enrollment process is the first touch for the users on the product, it sets a bad tone.
I can't find anywhere to change this setting. If there isn't a way to set this as a custom requirement, it should allow for any valid answer.