Visit Gmail Forum http://groups.google.com/group/Gmail-Help-Discussion Other Gmail Forums:- http://www.emaildiscussions.com/forumdisplay.php?forumid=30
Whenever I faced such problem, it was always recovered with ease. Having an alternate email address further simplifies the process.
Who knows if he remember them, they are the primary solution to recover lost passwords.. and Google always remind all who just signed up to keep them.
Well I know for a fact that you can skip the secondary email address. As for the security question, I think it's required. But I always tend to forget this. LOL!