The questions are referred to using XPath. In XPath 'positions' are 1-based so the first repeat is /data/group1/cancer_repeat[1] (or as you used, since it will get the first automatically) and the second is /data/group1/cancer_repeat[2]. Please make sure to use Enketo's API as it will take care of encoding the query parameters.
I hope this helps. This is not a heavily-used feature, so you may very well find bugs. If you do, please report them here: https://github.com/enketo/enketo-express. I'm not actually sure if the non-first repeat instances are created automatically. I don't think we've tested this...
If you are using the API instead of the handcrafted unencoded URL you posted, you seem to be doing this right. So there is likely a bug in this feature wrt non-first repeat instances. If you have time to create a nice reproducible issue on GitHub, that would be much appreciated.