This can be done from the user's profile in the ESSO Console:
- Select the "Connection" tab, then the "Self Service Password Request" tab
- Click the "Reset Answers" button
That will delete the user's answers and they will be forced to re-enter them.
For more information, please refer to the Console Admin Guide
in the section, 220.127.116.11 Managing User SSPR.