I suppose you mean the security question? It is supposed to have a question and answer saved in the settings.
Otherwise there is no captcha.
Can I advise you to leave the default settings for anti-spam for now? I think the honeypot and timeout function should work mostly against spambots. Against humans, if they are bothering you, moderation is often effective.