This can be done from the user's profile in the ESSO Console:
- Select the "Connection" tab, then the "Self Service Password Request" tab
- Click the "Reset Answers" button
That will delete the user's answers and they will be forced to re-enter them.
For more information, please refer to the Console Admin Guide
in the section, 18.104.22.168 Managing User SSPR.