0 / 20 answered

1. 1. A template echoes a stored URL into href without escaping. What is the first correction?

   A template echoes a stored URL into href without escaping. What is the first correction?

   Escape with esc_url() at output Sanitize with absint() Use wpdb prepare Add a nonce
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

2. 2. A save_post callback writes metadata on every invocation. What guards are needed?

   A save_post callback writes metadata on every invocation. What guards are needed?

   Nonce, autosave/revision handling, capability and input checks A cron event A CSS class A REST namespace only
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

3. 3. A template uses query_posts() to show featured content. What is preferable?

   A template uses query_posts() to show featured content. What is preferable?

   Flush rewrites Modify wp-config.php Use a secondary WP_Query and reset post data Use direct unprepared SQL
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

4. 4. A plugin calls flush_rewrite_rules() on every init. What is wrong?

   A plugin calls flush_rewrite_rules() on every init. What is wrong?

   It exposes passwords It disables CPTs It cannot update rules It is expensive and should run only on controlled lifecycle changes
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

5. 5. An AJAX mutation checks a nonce but no capability. Is it secure?

   An AJAX mutation checks a nonce but no capability. Is it secure?

   Yes, nonces grant permissions No, intent verification is not authorization No, because AJAX cannot mutate Yes, for POST
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

6. 6. A REST route omits permission_callback because it is public. What should change?

   A REST route omits permission_callback because it is public. What should change?

   Add an explicit __return_true permission callback Require administrator Move it to admin-ajax Disable REST
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

7. 7. Code concatenates a request value into SQL. What is the correction?

   Code concatenates a request value into SQL. What is the correction?

   Add wp_nonce_field() only Base64 encode it Validate as needed and bind it through $wpdb->prepare() Use esc_html()
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

8. 8. Critical records exist only in a transient. What is the design flaw?

   Critical records exist only in a transient. What is the design flaw?

   They are always public Transients cannot store arrays They never expire Transients are caches and can disappear early
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

9. 9. A recurring event is scheduled on every request. What happens?

   A recurring event is scheduled on every request. What happens?

   The theme deactivates Duplicate events may accumulate; check wp_next_scheduled() WordPress merges every event automatically The database resets
   Hint

   Choose the solution with the clearest boundary and safest lifecycle behavior.

10. 10. A 5 MB monthly report is stored as an autoloaded option. What is better?

    A 5 MB monthly report is stored as an autoloaded option. What is better?

    Load it in every theme Make it a nonce Split it into autoloaded scalars Store it non-autoloaded or in storage suited to its lifecycle
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

11. 11. A loop runs a custom query for each of 200 posts. What should review investigate?

    A loop runs a custom query for each of 200 posts. What should review investigate?

    More echo calls A higher hook priority More template files Batch retrieval, primed caches or a different query shape
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

12. 12. A child theme copies a huge parent template for one small insertion. What is preferable?

    A child theme copies a huge parent template for one small insertion. What is preferable?

    Move logic into core Edit the parent Copy every template Use an available hook or smaller override when possible
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

13. 13. A custom order workflow is implemented only in a child theme. What is the issue?

    A custom order workflow is implemented only in a child theme. What is the issue?

    Themes cannot access users Child themes cannot use PHP Orders must be pages The business capability disappears when the theme changes
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

14. 14. A static block changes save markup and old posts show validation errors. What was missing?

    A static block changes save markup and old posts show validation errors. What was missing?

    A deprecation/migration or compatible markup strategy A capability check A cron schedule A database index
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

15. 15. A dynamic block prints attributes directly in HTML. What is required?

    A dynamic block prints attributes directly in HTML. What is required?

    Contextual validation and output escaping A theme screenshot A rewrite flush Only JSON encoding
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

16. 16. A production bug appears. Should WP_DEBUG_DISPLAY be enabled publicly?

    A production bug appears. Should WP_DEBUG_DISPLAY be enabled publicly?

    Yes, with credentials Yes, indefinitely No, log targeted diagnostics privately Only for anonymous users
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

17. 17. Code catches Throwable and silently continues. What is the risk?

    Code catches Throwable and silently continues. What is the risk?

    Exceptions are sanitized Failures become invisible and data may remain inconsistent PHP becomes faster Hooks stop duplicating
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

18. 18. A plugin deletes all data on deactivation. What is wrong?

    A plugin deletes all data on deactivation. What is wrong?

    Deactivation is reversible; permanent deletion belongs to explicit uninstall policy Options cannot be deleted Deactivation cannot run PHP Only themes uninstall
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

19. 19. A service reads $_POST deep inside business logic. What is better?

    A service reads $_POST deep inside business logic. What is better?

    Store it before checking Make $_POST global again Escape it as HTML Validate at the request boundary and pass explicit typed data inward
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.

20. 20. A performance patch feels faster locally. What evidence is still needed?

    A performance patch feels faster locally. What evidence is still needed?

    A new theme screenshot A rewritten URL Comparable before/after measurements and regression checks A longer commit message only
    Hint

    Choose the solution with the clearest boundary and safest lifecycle behavior.