0 / 20 answered

1. 1. What is the essential difference between a WordPress action and a filter?

   Choose the statement that correctly describes the contract expected by WordPress.

   What is the essential difference between a WordPress action and a filter?

   An action performs a task; a filter modifies and returns a value. Filters work only inside themes. An action must always return a value; a filter returns nothing. There is no functional difference between them.
   Hint

   Ask yourself whether the received value must continue through the execution chain.

2. 2. Which statements about WordPress nonces are correct?

   Select all correct answers.

   Which statements about WordPress nonces are correct?

   They are a complete authorization mechanism on their own. They help confirm the intent behind a request. A WordPress nonce can technically be used only once. They should be combined with a capability check when authorizing a sensitive action.
   Hint

   A nonce verifies intent, not the user’s role or capabilities.

3. 3. What should be called after a secondary loop that uses WP_Query::the_post()?

   $query = new WP_Query( $args );
   while ( $query->have_posts() ) {
       $query->the_post();
       the_title();
   }

   What should be called after a secondary loop that uses WP_Query::the_post()?

   wp_reset_postdata() wp_reset_query_vars() flush_rewrite_rules() Nothing: WP_Query always restores $post automatically.
   Hint

   The secondary loop changed the global $post variable.

4. 4. Which hook is normally used to register a Custom Post Type?

   You want to call register_post_type() at the point recommended by WordPress.

   Which hook is normally used to register a Custom Post Type?

   wp_footer shutdown save_post init
   Hint

   This hook runs after WordPress has loaded but before the main request is processed.

5. 5. Which output-escaping pairs are appropriate for their context?

   Select all correct answers. The values are dynamic and are about to be rendered.

   Which output-escaping pairs are appropriate for their context?

   esc_url() for a URL placed in href or src. esc_html() for text placed between HTML tags. esc_attr() is preferable to esc_url() for every URL. sanitize_text_field() always replaces escaping at output time.
   Hint

   Visible HTML text and a URL attribute require different escaping functions.

6. 6. What is the difference between sanitizing and escaping data?

   Choose the most accurate statement for WordPress development.

   What is the difference between sanitizing and escaping data?

   Sanitize input; escape output according to its context. They are two names for the same operation. Sanitization is needed only in themes. Escape input once and output it without further checks.
   Hint

   Think about when data enters the system and when it leaves for the browser.

7. 7. Which wp_enqueue_script() practices are correct?

   Select all correct answers.

   Which wp_enqueue_script() practices are correct?

   Use a controlled version value to support cache invalidation. Declare dependencies such as jquery in the dependency array. Enqueued scripts always have to load in the document head. Print a second hard-coded script tag after enqueueing the same file.
   Hint

   Dependencies and versioning are part of the registration contract.

8. 8. Which template is the most specific conventional file for a single book CPT entry?

   The registered post type slug is book.

   Which template is the most specific conventional file for a single book CPT entry?

   taxonomy-book.php archive-book.php single-book.php page-book.php
   Hint

   The template hierarchy includes the post type slug.

9. 9. When should a plugin normally flush rewrite rules for a new CPT?

   Choose the approach that avoids unnecessary work on normal requests.

   When should a plugin normally flush rewrite rules for a new CPT?

   Flush before registering the CPT and never again. Rewrite rules never need flushing for a CPT. Register the CPT and flush once inside the activation workflow. Call flush_rewrite_rules() on every init request.
   Hint

   Flushing is expensive and registration must happen first.

10. 10. How should dynamic values be included in a custom SQL query with $wpdb?

    The query contains values supplied at runtime.

    How should dynamic values be included in a custom SQL query with $wpdb?

    Use $wpdb->prepare() with typed placeholders. Use esc_html() before concatenating the SQL. Concatenate the raw values after addslashes(). Base64-encode every value before querying.
    Hint

    Do not concatenate untrusted values into the SQL string.

11. 11. What is required for the permission_callback of a custom REST route?

    Choose the safest general rule.

    What is required for the permission_callback of a custom REST route?

    Always return true, including for destructive operations. Omit it because REST requests are automatically admin-only. Define it explicitly and check the capability required by the operation. Check only whether a nonce field exists, without verifying it.
    Hint

    Public and protected routes both need an explicit permission decision.

12. 12. What guarantee does a transient expiration provide?

    Consider external object caches as well as the database implementation.

    What guarantee does a transient expiration provide?

    The value is guaranteed to exist until the exact expiration second. The value will not be returned after that maximum lifetime, but it may disappear earlier. Expiration is ignored when an object cache is active. The expiration permanently stores the value in wp_posts.
    Hint

    An expiration is a maximum lifetime, not a minimum lifetime.

13. 13. Which values are good candidates for autoloaded options?

    Think about both access frequency and total payload size.

    Which values are good candidates for autoloaded options?

    Large API response archives used once per month. Small settings required on most requests. Uploaded binary files. Every option, regardless of size or usage.
    Hint

    Autoloaded options are loaded on many requests.

14. 14. How does hook priority affect callbacks attached to the same hook?

    Assume all callbacks are valid and registered.

    How does hook priority affect callbacks attached to the same hook?

    Priority applies only to filters, not actions. Lower numeric priorities run earlier. Priority changes how many arguments WordPress passes. Higher numeric priorities always run earlier.
    Hint

    Compare numeric priority values.

15. 15. Which checks belong in a save_post metabox handler?

    Select all generally appropriate safeguards.

    Which checks belong in a save_post metabox handler?

    Verify the metabox nonce. Trust every value in $_POST because the request came from wp-admin. Check the user capability for the post. Handle or skip autosaves deliberately.
    Hint

    Consider request intent, autosaves, and authorization.

16. 16. When should a custom taxonomy normally be registered?

    Choose the conventional WordPress lifecycle hook.

    When should a custom taxonomy normally be registered?

    wp_footer delete_post admin_notices init
    Hint

    It is the same common lifecycle point used for CPT registration.

17. 17. What does relation control in a WP_Query meta_query?

    The query contains more than one metadata condition.

    What does relation control in a WP_Query meta_query?

    Whether the metadata clauses are combined with AND or OR logic. The number of posts returned per page. The SQL table prefix used by the query. The post type rewrite slug.
    Hint

    Think of boolean logic between clauses.

18. 18. Which style.css header links a child theme to its parent?

    The parent theme directory is named lubinik-theme.

    Which style.css header links a child theme to its parent?

    Extends: functions.php Parent: Lubinik Template: lubinik-theme Theme Parent URL: /lubinik-theme
    Hint

    The value must match the parent directory name.

19. 19. Which hooks handle a custom WordPress AJAX action named save_note?

    The action may support both authenticated and unauthenticated visitors.

    Which hooks handle a custom WordPress AJAX action named save_note?

    rest_api_save_note wp_ajax_save_note wp_ajax_nopriv_save_note ajax_init_save_note
    Hint

    The unauthenticated variant has an extra suffix.

20. 20. Which function should authorize whether the current user may perform a WordPress operation?

    Choose the function intended for capability checks.

    Which function should authorize whether the current user may perform a WordPress operation?

    current_user_can() is_admin() get_bloginfo() wp_verify_nonce() alone
    Hint

    Roles group capabilities, but code should generally check the required capability.