I was just curious as to why there is both an anti-spam question and security check when registering? Surely that's a bit over the top? Wouldnt just the secuity check do?

Apparently not. We still get ten spam registrations a day that need to be cleared out by an admin. When you get the kind of traffic we do, spam happens no matter how many safeguards there are.