cyber security questions to ask