I heard you can burst a project by asking questions, if they are hiding something they won't be able to answer all questions thrown at them, is this true?
You can ask any question you want. There is freedom of speech for everyone, especially on the Internet, in crypto. But it's worth to note that based on moral principles, asking questions should be constructive and authentic. If your questions are made because you want to create FUD, it's bad and unacceptable in moral aspect.
What questions can one ask a project dev or team to know if they are up to something good or bad?
If you are an authentic member, your questions should be constructive then it will be helpful not only for yourself (to clear your mind about that specific project) but also can help other members in that project community. In addition, sometimes your questions are helpful for developer team or marketing team in that project to improve their project and their strategy.