In answer to your questions:
a) Within the theme itself you can enable reCaptcha on the registration, contact, and apply online forms as well as set a security question on the apply online form.
b) We don't officially support third party plugins, so we unfortunately cannot guarantee that these will work out of the box without additional customization required.
Thanks.