A 12-question diagnostic that tells you, in 15 minutes, whether your SMB is actually protected — or just lucky.