Asking remote job candidates this shocking question could save your company big bucks, security expert says