When trying to clear a user's password reset questions you might come across an error after deleting the user's associated pwd_active_answer records.
"The number of questions required for enrollment has changed. Enroll again."
If you want to completely clean up, as if the user never enrolled, we suggest clearing the records in the following tables for that specific user.
pwd_enrollment_snapshot user's associated "pwd_enrollment" records.