If you've lost the phone and don't have access, then the system will ask you for your second recovery email. If that fails as well, you will be asked to answer the security questions you have added to your account. However, this might not be available from the start. Meaning that you use and fail for one option, then try again and again until the system allows you to try again after 24 hours (usually!) until you reach the security questions.
