he vulnerability lies in the Charlotte, N.C.-based bank's stronger authentication solution, Sitekey, which poses challenge questions to customers as they attempt to login to their bank accounts. By incorrectly answering the challenge questions, customers could be locked out from online banking. Hackers can purchase databases of typical logins and incorrectly answer the challenge questions.