0 / 50 answered

1. 1. Which function is suitable for sanitizing a simple one-line text field?

   Which function is suitable for sanitizing a simple one-line text field?

   sanitize_text_field() current_user_can() wp_kses_post() only esc_url()
   Hint

   Identify the data-model or security responsibility before choosing the API.

2. 2. What is WordPress?

   What is WordPress?

   A programming language A database engine A web browser A content management system
   Hint

   Start with the everyday meaning of the WordPress term.

3. 3. Why should an uploaded filename not be trusted as a filesystem path?

   Why should an uploaded filename not be trusted as a filesystem path?

   PHP removes every extension Browsers guarantee uniqueness WordPress filenames are always encrypted It is user-controlled and may contain unsafe or conflicting components
   Hint

   Treat names as input.

4. 4. Which built-in taxonomy is non-hierarchical by default?

   Which built-in taxonomy is non-hierarchical by default?

   Post tag Page parent Category User role
   Hint

   Place the concept in the WordPress request, content, or permission model.

5. 5. What is a widget area or sidebar?

   What is a widget area or sidebar?

   An HTTP cookie A theme-registered region that can contain widgets or blocks The WordPress database A plugin update screen
   Hint

   Separate presentation responsibilities from reusable site functionality.

6. 6. How are callbacks with the same priority generally ordered?

   How are callbacks with the same priority generally ordered?

   By plugin folder size By the order in which they were registered Alphabetically Randomly
   Hint

   Identify the role of the WordPress function or extension point.

7. 7. Which style.css header links a child theme to its parent?

   The parent theme directory is named lubinik-theme.

   Which style.css header links a child theme to its parent?

   Template: lubinik-theme Extends: functions.php Parent: Lubinik Theme Parent URL: /lubinik-theme
   Hint

   The value must match the parent directory name.

8. 8. What does a transient expiration guarantee?

   What does a transient expiration guarantee?

   The value will not be returned after that time; it may disappear earlier The callback runs at expiration The value exists until the exact second The value is stored outside the database
   Hint

   Consider lifecycle, authorization, failure and long-term maintenance.

9. 9. Why should a post-type key be short, stable and uniquely prefixed?

   Why should a post-type key be short, stable and uniquely prefixed?

   It becomes a persistent programmatic identifier and must avoid collisions It is displayed as every post title It stores the database password It controls PHP memory
   Hint

   Identify the data-model or security responsibility before choosing the API.

10. 10. What are categories and tags in a default WordPress installation?

    What are categories and tags in a default WordPress installation?

    Database credentials Theme templates User roles Taxonomies used to organize posts
    Hint

    Start with the everyday meaning of the WordPress term.

11. 11. What must match when removing a callback with remove_action()?

    What must match when removing a callback with remove_action()?

    The hook name, callback, and priority used when it was added Only the callback name The accepted argument count Only the hook name
    Hint

    A callback registered at priority 20 cannot be removed as though it used priority 10.

12. 12. Which checks are important before accepting an uploaded file?

    Which checks are important before accepting an uploaded file?

    Only the file extension The referring page title Capability, nonce, size and allowed file type Only the original filename
    Hint

    Client-provided names and MIME values are not enough.

13. 13. When should a custom taxonomy normally be registered?

    Choose the conventional WordPress lifecycle hook.

    When should a custom taxonomy normally be registered?

    wp_footer delete_post init admin_notices
    Hint

    It is the same common lifecycle point used for CPT registration.

14. 14. What is a taxonomy?

    What is a taxonomy?

    A PHP error category A theme template A system for grouping content with terms An HTTP response header
    Hint

    Place the concept in the WordPress request, content, or permission model.

15. 15. Which attack are WordPress nonces primarily intended to mitigate?

    Which attack are WordPress nonces primarily intended to mitigate?

    SQL injection by themselves Server-side request forgery Password brute force Cross-site request forgery
    Hint

    They do not replace validation, escaping or authorization.

16. 16. Why store a plugin database schema version?

    Why store a plugin database schema version?

    To replace the plugin version header To improve CSS caching To bypass activation hooks To run only the migrations needed after an update
    Hint

    Activation is not guaranteed to run during every deployment pattern.

17. 17. What is the essential difference between a WordPress action and a filter?

    Choose the statement that correctly describes the contract expected by WordPress.

    What is the essential difference between a WordPress action and a filter?

    An action must always return a value; a filter returns nothing. An action performs a task; a filter modifies and returns a value. There is no functional difference between them. Filters work only inside themes.
    Hint

    Ask yourself whether the received value must continue through the execution chain.

18. 18. Which function should be preferred when redirecting to a URL that must stay on an allowed host?

    Which function should be preferred when redirecting to a URL that must stay on an allowed host?

    wp_send_json() esc_url() wp_safe_redirect() header() with unvalidated input
    Hint

    Escaping a string is not the same as validating a redirect destination.

19. 19. Which callback runs first on the same hook?

    Which callback runs first on the same hook?

    The callback in the largest file The callback with the longest name The newest plugin always The callback with the lower numeric priority
    Hint

    Identify the role of the WordPress function or extension point.

20. 20. What does posts_per_page control?

    What does posts_per_page control?

    The number of posts requested per result page The post title length The user role count The number of database tables
    Hint

    Identify the WordPress API responsibility before considering implementation details.

21. 21. Why must redirects and many HTTP headers be sent before body output?

    Why must redirects and many HTTP headers be sent before body output?

    HTML forbids redirects PHP cannot normally modify response headers after output has started WordPress deletes late headers Browsers ignore every late response
    Hint

    Place the concept in the WordPress request, content, or permission model.

22. 22. What guarantee does a transient expiration provide?

    Consider external object caches as well as the database implementation.

    What guarantee does a transient expiration provide?

    The value is guaranteed to exist until the exact expiration second. The value will not be returned after that maximum lifetime, but it may disappear earlier. The expiration permanently stores the value in wp_posts. Expiration is ignored when an object cache is active.
    Hint

    An expiration is a maximum lifetime, not a minimum lifetime.

23. 23. Which endpoint receives traditional WordPress AJAX requests?

    Which endpoint receives traditional WordPress AJAX requests?

    wp-json/ajax wp-content/ajax.php wp-admin/admin-ajax.php index.html
    Hint

    Consider lifecycle, authorization, failure and long-term maintenance.

24. 24. Which checks belong in a save_post metabox handler?

    Select all generally appropriate safeguards.

    Which checks belong in a save_post metabox handler?

    Verify the metabox nonce. Trust every value in $_POST because the request came from wp-admin. Check the user capability for the post. Handle or skip autosaves deliberately.
    Hint

    Consider request intent, autosaves, and authorization.

25. 25. Which function registers a taxonomy?

    Which function registers a taxonomy?

    wp_taxonomy_create() add_category_table() register_taxonomy() register_term_type()
    Hint

    Identify the data-model or security responsibility before choosing the API.

26. 26. What is the primary responsibility of a WordPress theme?

    What is the primary responsibility of a WordPress theme?

    Replace WordPress core Store MySQL passwords Manage the web server Control presentation and templates
    Hint

    Start with the everyday meaning of the WordPress term.

27. 27. What is a registered menu location?

    What is a registered menu location?

    A PHP namespace A fixed list of URLs in core A theme-defined place where an administrator can assign a navigation menu A database table
    Hint

    Separate presentation responsibilities from reusable site functionality.

28. 28. On a standard single-site installation, which role normally has the broadest administrative access?

    On a standard single-site installation, which role normally has the broadest administrative access?

    Administrator Editor Author Subscriber
    Hint

    Start with the everyday meaning of the WordPress term.

29. 29. Which task is normally associated with the Editor role?

    Which task is normally associated with the Editor role?

    Editing wp-config.php Managing and publishing content from multiple authors Managing the MySQL service Installing WordPress core on the server
    Hint

    Start with the everyday meaning of the WordPress term.

30. 30. What is The Loop in WordPress?

    What is The Loop in WordPress?

    A PHP installation process A database backup A CSS animation The pattern that iterates through posts in a query and renders each one
    Hint

    Identify the role of the WordPress function or extension point.

31. 31. Which hook is designed for registering theme features?

    Which hook is designed for registering theme features?

    wp_ajax plugins_loaded after_setup_theme shutdown
    Hint

    Identify the role of the WordPress function or extension point.

32. 32. What can WordPress attachment metadata contain for an image?

    What can WordPress attachment metadata contain for an image?

    The active plugin list only The database root password Every user capability Dimensions and generated image sizes
    Hint

    Place the concept in the WordPress request, content, or permission model.

33. 33. Why check the expected HTTP method in a form handler?

    Why check the expected HTTP method in a form handler?

    To grant capabilities To escape output To reject requests that do not follow the endpoint contract To load the active theme
    Hint

    Identify the data-model or security responsibility before choosing the API.

34. 34. What is unusual about variable scope inside a plugin activation callback?

    What is unusual about variable scope inside a plugin activation callback?

    PHP variables persist forever Plugin globals may not be global unless explicitly declared WordPress skips the callback file Only constants are available
    Hint

    Prefer explicit inputs and APIs.

35. 35. What does get_footer() normally load?

    What does get_footer() normally load?

    The last database row The theme footer template The WordPress debug log A REST response footer
    Hint

    Separate presentation responsibilities from reusable site functionality.

36. 36. What does relation control in a WP_Query meta_query?

    The query contains more than one metadata condition.

    What does relation control in a WP_Query meta_query?

    The number of posts returned per page. The SQL table prefix used by the query. The post type rewrite slug. Whether the metadata clauses are combined with AND or OR logic.
    Hint

    Think of boolean logic between clauses.

37. 37. Why should attaching a callback to the special all hook be approached carefully?

    Why should attaching a callback to the special all hook be approached carefully?

    It works only in multisite It runs for every hook and can create major overhead It cannot receive arguments It disables priorities
    Hint

    Broad instrumentation has a cost.

38. 38. Which statements about WordPress nonces are correct?

    Select all correct answers.

    Which statements about WordPress nonces are correct?

    A WordPress nonce can technically be used only once. They should be combined with a capability check when authorizing a sensitive action. They help confirm the intent behind a request. They are a complete authorization mechanism on their own.
    Hint

    A nonce verifies intent, not the user’s role or capabilities.

39. 39. Why can an inline anonymous hook callback be difficult to remove later?

    Why can an inline anonymous hook callback be difficult to remove later?

    Anonymous functions cannot run WordPress converts it to HTML It has no priority Removal requires the same callback identity and priority
    Hint

    Identify the role of the WordPress function or extension point.

40. 40. What does body_class() help add?

    What does body_class() help add?

    A page title An HTTP cookie A database column Contextual classes to the body element
    Hint

    Identify the role of the WordPress function or extension point.

41. 41. What does a WordPress nonce primarily verify?

    What does a WordPress nonce primarily verify?

    Request intent and origin within a time window That a user has every capability That input is valid That SQL is prepared
    Hint

    Identify the data-model or security responsibility before choosing the API.

42. 42. What does has_post_thumbnail() check?

    What does has_post_thumbnail() check?

    Whether the theme has a screenshot Whether a post has a featured image assigned Whether an image is cached Whether uploads are writable
    Hint

    Identify the role of the WordPress function or extension point.

43. 43. Which function prints a hidden nonce field for a form?

    Which function prints a hidden nonce field for a form?

    current_user_can() esc_attr() wp_create_user() wp_nonce_field()
    Hint

    Identify the data-model or security responsibility before choosing the API.

44. 44. Why is a valid WordPress nonce not sufficient authorization?

    Why is a valid WordPress nonce not sufficient authorization?

    A nonce sanitizes submitted data Nonces contain the user password A nonce verifies intent and request origin, not the user capability Nonces work only for administrators
    Hint

    Intent and permission are separate questions.

45. 45. When should permanent plugin data normally be deleted?

    When should permanent plugin data normally be deleted?

    During an explicit uninstall routine On every deactivation When rewrite rules are flushed On every page load
    Hint

    A user may deactivate only to debug temporarily.

46. 46. What is the difference between authentication and authorization?

    What is the difference between authentication and authorization?

    Authentication establishes identity; authorization decides allowed actions They are the same process Authorization creates passwords Authentication escapes HTML
    Hint

    Place the concept in the WordPress request, content, or permission model.

47. 47. What does have_posts() check?

    What does have_posts() check?

    Whether the current query has another post to process Whether any database table exists Whether a theme has CSS Whether the user can install plugins
    Hint

    Identify the role of the WordPress function or extension point.

48. 48. Why pass a default value to get_option()?

    Why pass a default value to get_option()?

    To create a database index To bypass sanitization To obtain predictable behavior before the option exists To force autoloading
    Hint

    Consider lifecycle, authorization, failure and long-term maintenance.

49. 49. What is dbDelta() designed to help with?

    What is dbDelta() designed to help with?

    Scheduling cron events Creating or updating plugin database table schemas Deleting all plugin options Preparing SELECT placeholders
    Hint

    It is commonly used during versioned migrations.

50. 50. Why should plugin functions and identifiers use a unique prefix or namespace?

    Why should plugin functions and identifiers use a unique prefix or namespace?

    To avoid collisions with WordPress and other extensions To make them run twice To bypass authorization To hide code from PHP
    Hint

    Identify the WordPress API responsibility before considering implementation details.