It's built-in but it's not very effective anymore. It is better to use the Q&A feature. You just need to create some questions.
I guess recaptcha works out of the box. But I prefer custom question answer. Especially in my forum (which is not in English) I can keep the question simple and do not expect a bot to find out an answer. This has worked great in our board so far.