The growing popularity of the app store has made Apple ID’s a target for scammers, hackers, phishers and every other digital scoundrel. With that ID, they have access to your library of music, movies, books, and apps as well as personally identifiable information and financial information. The stories of people having their Apple ID hacked have not happened frequently, but as with the new Mac virus (flashback trojan), the ever increasing popularity of Apple means an increased vulnerability.
To combat this issue, Apple has added security to your account, effective today. It is a series of three security questions and a rescue email that will help you prove your identity in the event your account is compromised or you forget your password. The integration of the new settings is caused by using the app store on your phone. It is important to note that updating existing apps will not trigger the change. If you don’t have any new apps to download, but want to up the ante on security, just choose the first free app you can find and subsequently delete it.
The attached photo shows the popup notification as well as the screen to choose/answer the questions. After it is complete and recovery email is entered (hidden from view in screen shot), a confirmation email will be sent from Apple, alerting you to click and verify the email address used. Even while updating security, they are sure to avoid scams.
Some skepticism has appeared around the web and the legitimacy has been questions. This is, in fact, from Apple. It is only triggered when an app is downloaded and the email appears to be genuinely from Apple as well. This is being seen by too many people with different apps and varying configurations to be a unified scam anyway.

The received email reads:
Thank you.
You’ve taken the added security step and provided a rescue email address. Now all you need to do is verify that it belongs to you.
The rescue address you have given us is ???@???.com. Just click the link below to verify, sign in using your Apple ID and password, then follow the prompts.
The rescue email address is dedicated your security and allows Apple to get in touch if any account questions come up, such as the need to reset or change your security questions. As promised, Apple will never send you any announcements or marketing messages to this address.