A simple arithmetic test, 1 + 3 = [___] seems to be
sufficient in most cases, for example.
savannah.gnu.org has that kind of test. We still get a few spam
registrants. I think the math has to be harder. Some open-ended
typography question ("Who designed Zapf Chancery?") would probably be
spam-proof.
karl