Got a vendor security questionnaire and no SOC 2 or security team? Here's exactly what each question means and how to answer honestly and still win the deal.