0 / 20 answered

1. 1. What is the essential difference between a WordPress action and a filter?

   Choose the statement that correctly describes the contract expected by WordPress.

   What is the essential difference between a WordPress action and a filter?

   An action must always return a value; a filter returns nothing. Filters work only inside themes. An action performs a task; a filter modifies and returns a value. There is no functional difference between them.
   Hint

   Ask yourself whether the received value must continue through the execution chain.

2. 2. Which statements about WordPress nonces are correct?

   Select all correct answers.

   Which statements about WordPress nonces are correct?

   A WordPress nonce can technically be used only once. They help confirm the intent behind a request. They should be combined with a capability check when authorizing a sensitive action. They are a complete authorization mechanism on their own.
   Hint

   A nonce verifies intent, not the user’s role or capabilities.

3. 3. What should be called after a secondary loop that uses WP_Query::the_post()?

   $query = new WP_Query( $args );
   while ( $query->have_posts() ) {
       $query->the_post();
       the_title();
   }

   What should be called after a secondary loop that uses WP_Query::the_post()?

   wp_reset_query_vars() wp_reset_postdata() Nothing: WP_Query always restores $post automatically. flush_rewrite_rules()
   Hint

   The secondary loop changed the global $post variable.

4. 4. Which hook is normally used to register a Custom Post Type?

   You want to call register_post_type() at the point recommended by WordPress.

   Which hook is normally used to register a Custom Post Type?

   init save_post wp_footer shutdown
   Hint

   This hook runs after WordPress has loaded but before the main request is processed.

5. 5. Which output-escaping pairs are appropriate for their context?

   Select all correct answers. The values are dynamic and are about to be rendered.

   Which output-escaping pairs are appropriate for their context?

   esc_html() for text placed between HTML tags. sanitize_text_field() always replaces escaping at output time. esc_attr() is preferable to esc_url() for every URL. esc_url() for a URL placed in href or src.
   Hint

   Visible HTML text and a URL attribute require different escaping functions.

6. 6. What is the difference between sanitizing and escaping data?

   Choose the most accurate statement for WordPress development.

   What is the difference between sanitizing and escaping data?

   Sanitize input; escape output according to its context. They are two names for the same operation. Escape input once and output it without further checks. Sanitization is needed only in themes.
   Hint

   Think about when data enters the system and when it leaves for the browser.

7. 7. Which wp_enqueue_script() practices are correct?

   Select all correct answers.

   Which wp_enqueue_script() practices are correct?

   Declare dependencies such as jquery in the dependency array. Print a second hard-coded script tag after enqueueing the same file. Use a controlled version value to support cache invalidation. Enqueued scripts always have to load in the document head.
   Hint

   Dependencies and versioning are part of the registration contract.

8. 8. Which template is the most specific conventional file for a single book CPT entry?

   The registered post type slug is book.

   Which template is the most specific conventional file for a single book CPT entry?

   taxonomy-book.php page-book.php archive-book.php single-book.php
   Hint

   The template hierarchy includes the post type slug.

9. 9. When should a plugin normally flush rewrite rules for a new CPT?

   Choose the approach that avoids unnecessary work on normal requests.

   When should a plugin normally flush rewrite rules for a new CPT?

   Rewrite rules never need flushing for a CPT. Call flush_rewrite_rules() on every init request. Register the CPT and flush once inside the activation workflow. Flush before registering the CPT and never again.
   Hint

   Flushing is expensive and registration must happen first.

10. 10. How should dynamic values be included in a custom SQL query with $wpdb?

    The query contains values supplied at runtime.

    How should dynamic values be included in a custom SQL query with $wpdb?

    Use $wpdb->prepare() with typed placeholders. Concatenate the raw values after addslashes(). Use esc_html() before concatenating the SQL. Base64-encode every value before querying.
    Hint

    Do not concatenate untrusted values into the SQL string.

11. 11. What is required for the permission_callback of a custom REST route?

    Choose the safest general rule.

    What is required for the permission_callback of a custom REST route?

    Check only whether a nonce field exists, without verifying it. Always return true, including for destructive operations. Define it explicitly and check the capability required by the operation. Omit it because REST requests are automatically admin-only.
    Hint

    Public and protected routes both need an explicit permission decision.

12. 12. What guarantee does a transient expiration provide?

    Consider external object caches as well as the database implementation.

    What guarantee does a transient expiration provide?

    The expiration permanently stores the value in wp_posts. The value is guaranteed to exist until the exact expiration second. The value will not be returned after that maximum lifetime, but it may disappear earlier. Expiration is ignored when an object cache is active.
    Hint

    An expiration is a maximum lifetime, not a minimum lifetime.

13. 13. Which values are good candidates for autoloaded options?

    Think about both access frequency and total payload size.

    Which values are good candidates for autoloaded options?

    Every option, regardless of size or usage. Uploaded binary files. Large API response archives used once per month. Small settings required on most requests.
    Hint

    Autoloaded options are loaded on many requests.

14. 14. How does hook priority affect callbacks attached to the same hook?

    Assume all callbacks are valid and registered.

    How does hook priority affect callbacks attached to the same hook?

    Priority changes how many arguments WordPress passes. Lower numeric priorities run earlier. Priority applies only to filters, not actions. Higher numeric priorities always run earlier.
    Hint

    Compare numeric priority values.

15. 15. Which checks belong in a save_post metabox handler?

    Select all generally appropriate safeguards.

    Which checks belong in a save_post metabox handler?

    Handle or skip autosaves deliberately. Trust every value in $_POST because the request came from wp-admin. Check the user capability for the post. Verify the metabox nonce.
    Hint

    Consider request intent, autosaves, and authorization.

16. 16. When should a custom taxonomy normally be registered?

    Choose the conventional WordPress lifecycle hook.

    When should a custom taxonomy normally be registered?

    admin_notices wp_footer delete_post init
    Hint

    It is the same common lifecycle point used for CPT registration.

17. 17. What does relation control in a WP_Query meta_query?

    The query contains more than one metadata condition.

    What does relation control in a WP_Query meta_query?

    The post type rewrite slug. The number of posts returned per page. The SQL table prefix used by the query. Whether the metadata clauses are combined with AND or OR logic.
    Hint

    Think of boolean logic between clauses.

18. 18. Which style.css header links a child theme to its parent?

    The parent theme directory is named lubinik-theme.

    Which style.css header links a child theme to its parent?

    Extends: functions.php Template: lubinik-theme Parent: Lubinik Theme Parent URL: /lubinik-theme
    Hint

    The value must match the parent directory name.

19. 19. Which hooks handle a custom WordPress AJAX action named save_note?

    The action may support both authenticated and unauthenticated visitors.

    Which hooks handle a custom WordPress AJAX action named save_note?

    rest_api_save_note wp_ajax_nopriv_save_note ajax_init_save_note wp_ajax_save_note
    Hint

    The unauthenticated variant has an extra suffix.

20. 20. Which function should authorize whether the current user may perform a WordPress operation?

    Choose the function intended for capability checks.

    Which function should authorize whether the current user may perform a WordPress operation?

    wp_verify_nonce() alone is_admin() get_bloginfo() current_user_can()
    Hint

    Roles group capabilities, but code should generally check the required capability.