WordPress Intermediate Assessment

Training mode

WordPress Intermediate Assessment

Time remaining:

0 / 50 answered

1. What is the Site Editor used for with a block theme?

What is the Site Editor used for with a block theme? Installing PHP extensions Editing the MySQL configuration Editing site-wide templates and styles with blocks Changing DNS records

Hint
Start with the everyday meaning of the WordPress term.
2. Which hook handles authenticated AJAX action save_note?

Which hook handles authenticated AJAX action save_note? wp_ajax_save_note wp_rest_save_note ajax_save_note admin_post_ajax_save_note

Hint
Consider lifecycle, authorization, failure and long-term maintenance.
3. What is the difference between authentication and authorization?

What is the difference between authentication and authorization? Authorization creates passwords They are the same process Authentication establishes identity; authorization decides allowed actions Authentication escapes HTML

Hint
Place the concept in the WordPress request, content, or permission model.
4. What relationship does wp_set_object_terms() manage?

What relationship does wp_set_object_terms() manage? Associating an object such as a post with taxonomy terms Assigning a user role Registering a theme Adding post metadata

Hint
Identify the data-model or security responsibility before choosing the API.
5. What should fields be set to when only post IDs are needed?

What should fields be set to when only post IDs are needed? ids keys post_id_only minimal

Hint
Identify the WordPress API responsibility before considering implementation details.
6. Where should functionality that must survive a theme change usually be hooked?

Where should functionality that must survive a theme change usually be hooked? Only in the theme footer In a WordPress core file In a plugin In uploaded media

Hint
Identify the role of the WordPress function or extension point.
7. What is the difference between sanitizing and escaping data?

Choose the most accurate statement for WordPress development.

What is the difference between sanitizing and escaping data? Sanitize input; escape output according to its context. Sanitization is needed only in themes. They are two names for the same operation. Escape input once and output it without further checks.

Hint
Think about when data enters the system and when it leaves for the browser.
8. What is a widget in classic WordPress terminology?

What is a widget in classic WordPress terminology? A PHP error level A user password rule A configurable content or interface component placed in a widget area A database migration

Hint
Start with the everyday meaning of the WordPress term.
9. Why does WordPress expose lifecycle hooks?

Why does WordPress expose lifecycle hooks? Extensions can run at defined stages without editing core They configure DNS They store uploaded files They replace PHP functions

Hint
Place the concept in the WordPress request, content, or permission model.
10. What does a WordPress user role primarily define?

What does a WordPress user role primarily define? A permalink format A database prefix A theme color palette A collection of capabilities

Hint
Start with the everyday meaning of the WordPress term.
11. Which function sanitizes a lowercase machine-readable key?

Which function sanitizes a lowercase machine-readable key? wpautop() sanitize_key() sanitize_textarea_field() esc_js()

Hint
Identify the data-model or security responsibility before choosing the API.
12. What does a navigation menu manage?

What does a navigation menu manage? An ordered collection of links displayed by the theme Database indexes The PHP include order Plugin activation hooks

Hint
Start with the everyday meaning of the WordPress term.
13. Where are ordinary plugins installed by default?

Where are ordinary plugins installed by default? wp-includes/extensions uploads/plugins wp-admin/plugins wp-content/plugins

Hint
Place the concept in the WordPress request, content, or permission model.
14. What does update_option() do when an option does not exist?

What does update_option() do when an option does not exist? It adds the option It throws an exception It creates a post It silently discards the value

Hint
Consider lifecycle, authorization, failure and long-term maintenance.
15. When is do_action_ref_array() useful?

When is do_action_ref_array() useful? To remove all filters When hook arguments are already stored in an array and references matter When no callbacks exist To create an AJAX nonce

Hint
Compare it with call_user_func_array().
16. When should permanent plugin cleanup normally occur?

When should permanent plugin cleanup normally occur? On every page request On every deactivation without warning When a theme changes During an explicit uninstall routine

Hint
Identify the WordPress API responsibility before considering implementation details.
17. What is a benefit of checking object-level capabilities such as edit_post with an object ID?

What is a benefit of checking object-level capabilities such as edit_post with an object ID? It skips authentication It disables roles WordPress can map the request through ownership and post-type rules It makes the post public

Hint
Authorization may depend on the object owner and status.
18. What does do_action() do?

What does do_action() do? Fires an action and invokes registered callbacks Registers a new callback Removes every action Returns a filtered string

Hint
Identify the role of the WordPress function or extension point.
19. What is special about plugins placed in wp-content/mu-plugins?

What is special about plugins placed in wp-content/mu-plugins? They are automatically loaded and are not activated through the ordinary Plugins screen They replace WordPress core They cannot contain PHP They run only for anonymous visitors

Hint
Place the concept in the WordPress request, content, or permission model.
20. What is a WordPress hook?

What is a WordPress hook? A database table A user session A theme screenshot A named extension point where callbacks can run

Hint
Identify the role of the WordPress function or extension point.
21. Why might a template create a secondary WP_Query?

Why might a template create a secondary WP_Query? To display another selected collection of posts without replacing the main request To activate a plugin To reconnect to MySQL To change the site URL

Hint
Identify the role of the WordPress function or extension point.
22. Why should plugin strings use a consistent text domain?

Why should plugin strings use a consistent text domain? To namespace database tables To register scripts So translation tools can associate strings with the plugin To authorize REST requests

Hint
It is part of internationalization calls.
23. What does get_header() normally load?

What does get_header() normally load? A plugin file header HTTP request headers only The database schema The theme header template

Hint
Separate presentation responsibilities from reusable site functionality.
24. Which attack are WordPress nonces primarily intended to mitigate?

Which attack are WordPress nonces primarily intended to mitigate? Cross-site request forgery SQL injection by themselves Server-side request forgery Password brute force

Hint
They do not replace validation, escaping or authorization.
25. What does the_title() normally do inside The Loop?

What does the_title() normally do inside The Loop? Displays the current post title Changes the post status Prints the author password Returns the site URL only

Hint
Identify the role of the WordPress function or extension point.
26. What must a filter callback normally do?

What must a filter callback normally do? Echo the value and return nothing Return the value that should continue through the filter chain Call exit Delete the original value

Hint
Identify the role of the WordPress function or extension point.
27. Which URL prefix normally exposes the WordPress REST API?

Which URL prefix normally exposes the WordPress REST API? /wp-content/json/ /wp-admin/api/ /rest.php/ /wp-json/

Hint
Place the concept in the WordPress request, content, or permission model.
28. Which function prints a hidden nonce field for a form?

Which function prints a hidden nonce field for a form? wp_nonce_field() wp_create_user() esc_attr() current_user_can()

Hint
Identify the data-model or security responsibility before choosing the API.
29. What should a theme consider rendering when have_posts() is false?

What should a theme consider rendering when have_posts() is false? A database password A useful no-content message or template The plugin activation screen A PHP fatal error

Hint
Identify the role of the WordPress function or extension point.
30. What does absint() produce?

What does absint() produce? An escaped HTML attribute A boolean only A non-negative integer A database query

Hint
Identify the data-model or security responsibility before choosing the API.
31. What distinguishes an Editor from an Author?

What distinguishes an Editor from an Author? An Editor can edit wp-config.php An Editor can manage and publish posts belonging to other users An Editor cannot publish An Editor owns the database

Hint
Place the concept in the WordPress request, content, or permission model.
32. What object is normally passed to a REST endpoint callback?

What object is normally passed to a REST endpoint callback? WP_User_Query WP_Theme WP_Query only WP_REST_Request

Hint
Consider lifecycle, authorization, failure and long-term maintenance.
33. When is a taxonomy usually preferable to plain metadata?

When is a taxonomy usually preferable to plain metadata? When storing an arbitrary serialized cache When storing one private API token When the value has no shared meaning When values are reusable classifications users browse or filter by

Hint
Identify the data-model or security responsibility before choosing the API.
34. Which function both translates and safely escapes plain text for HTML output?

Which function both translates and safely escapes plain text for HTML output? esc_html__() wp_kses_post() sanitize_text_field() __()

Hint
Combine internationalization with context-appropriate output escaping.
35. What does get_sidebar() normally load?

What does get_sidebar() normally load? The admin menu A sidebar template A SQL column The browser history

Hint
Separate presentation responsibilities from reusable site functionality.
36. What lets WordPress recognize a PHP file as a plugin?

What lets WordPress recognize a PHP file as a plugin? A JSON database A class named WordPressPlugin A CSS @plugin rule A valid plugin header containing Plugin Name

Hint
Identify the WordPress API responsibility before considering implementation details.
37. What happens when a child theme provides header.php?

What happens when a child theme provides header.php? WordPress ignores it Both headers always print The child header.php is used instead of the parent file The parent file is deleted

Hint
Separate presentation responsibilities from reusable site functionality.
38. What does do_settings_sections( $page ) render?

What does do_settings_sections( $page ) render? Cron events The admin menu Registered sections and fields for a settings page REST routes

Hint
Consider lifecycle, authorization, failure and long-term maintenance.
39. What happens when the child theme does not provide a requested template?

What happens when the child theme does not provide a requested template? The parent theme is deactivated WordPress may use the matching parent template WordPress creates the file The site always returns 404

Hint
Separate presentation responsibilities from reusable site functionality.
40. On which hook should REST routes be registered?

On which hook should REST routes be registered? admin_menu init only rest_api_init wp_footer

Hint
Consider lifecycle, authorization, failure and long-term maintenance.
41. What does a theme content width setting primarily communicate?

What does a theme content width setting primarily communicate? The database column width The admin menu width The intended maximum width for embedded and media content The viewport breakpoint

Hint
It concerns rendered media dimensions.
42. How should a deliberately public REST route express permission?

How should a deliberately public REST route express permission? Omit permission_callback Use __return_true as an explicit permission callback Disable REST authentication globally Use current_user_can( administrator )

Hint
Consider lifecycle, authorization, failure and long-term maintenance.
43. Should a child theme always assume WordPress automatically loads the parent stylesheet?

Should a child theme always assume WordPress automatically loads the parent stylesheet? Only when JavaScript is disabled Yes, in every theme Only for block themes No, loading behavior depends on the themes and assets should be enqueued intentionally

Hint
Separate presentation responsibilities from reusable site functionality.
44. Why call wp_reset_postdata() after a secondary loop that used the_post()?

Why call wp_reset_postdata() after a secondary loop that used the_post()? To clear the database cache entirely To restart PHP To delete the secondary posts To restore template globals to the main query post

Hint
Identify the role of the WordPress function or extension point.
45. What does a WordPress nonce primarily verify?

What does a WordPress nonce primarily verify? That SQL is prepared That a user has every capability Request intent and origin within a time window That input is valid

Hint
Identify the data-model or security responsibility before choosing the API.
46. What header commonly carries the REST nonce for cookie-authenticated requests?

What header commonly carries the REST nonce for cookie-authenticated requests? Authorization-Theme X-Plugin-Password Cookie-Nonce-Only X-WP-Nonce

Hint
Consider lifecycle, authorization, failure and long-term maintenance.
47. What is unusual about variable scope inside a plugin activation callback?

What is unusual about variable scope inside a plugin activation callback? PHP variables persist forever Plugin globals may not be global unless explicitly declared WordPress skips the callback file Only constants are available

Hint
Prefer explicit inputs and APIs.
48. What should still remain in a plugin rather than a child theme?

What should still remain in a plugin rather than a child theme? A template override Presentation-specific spacing Theme color variables Reusable functionality that should survive theme changes

Hint
Separate presentation responsibilities from reusable site functionality.
49. What must match when removing a callback with remove_action()?

What must match when removing a callback with remove_action()? Only the hook name Only the callback name The hook name, callback, and priority used when it was added The accepted argument count

Hint
A callback registered at priority 20 cannot be removed as though it used priority 10.
50. Why must classic themes call wp_head() and wp_footer()?

Why must classic themes call wp_head() and wp_footer()? They enable permalinks Plugins and WordPress use them to print registered assets and markup They render the post title They create database tables

Hint
Without them, enqueued assets may disappear.

1. What is the Site Editor used for with a block theme?

2. Which hook handles authenticated AJAX action save_note?

3. What is the difference between authentication and authorization?

4. What relationship does wp_set_object_terms() manage?

5. What should fields be set to when only post IDs are needed?

6. Where should functionality that must survive a theme change usually be hooked?

7. What is the difference between sanitizing and escaping data?

8. What is a widget in classic WordPress terminology?

9. Why does WordPress expose lifecycle hooks?

10. What does a WordPress user role primarily define?

11. Which function sanitizes a lowercase machine-readable key?

12. What does a navigation menu manage?

13. Where are ordinary plugins installed by default?

14. What does update_option() do when an option does not exist?

15. When is do_action_ref_array() useful?

16. When should permanent plugin cleanup normally occur?

17. What is a benefit of checking object-level capabilities such as edit_post with an object ID?

18. What does do_action() do?

19. What is special about plugins placed in wp-content/mu-plugins?

20. What is a WordPress hook?

21. Why might a template create a secondary WP_Query?

22. Why should plugin strings use a consistent text domain?

23. What does get_header() normally load?

24. Which attack are WordPress nonces primarily intended to mitigate?

25. What does the_title() normally do inside The Loop?

26. What must a filter callback normally do?

27. Which URL prefix normally exposes the WordPress REST API?

28. Which function prints a hidden nonce field for a form?

29. What should a theme consider rendering when have_posts() is false?

30. What does absint() produce?

31. What distinguishes an Editor from an Author?

32. What object is normally passed to a REST endpoint callback?

33. When is a taxonomy usually preferable to plain metadata?

34. Which function both translates and safely escapes plain text for HTML output?

35. What does get_sidebar() normally load?

36. What lets WordPress recognize a PHP file as a plugin?

37. What happens when a child theme provides header.php?

38. What does do_settings_sections( $page ) render?

39. What happens when the child theme does not provide a requested template?

40. On which hook should REST routes be registered?

41. What does a theme content width setting primarily communicate?

42. How should a deliberately public REST route express permission?

43. Should a child theme always assume WordPress automatically loads the parent stylesheet?

44. Why call wp_reset_postdata() after a secondary loop that used the_post()?

45. What does a WordPress nonce primarily verify?

46. What header commonly carries the REST nonce for cookie-authenticated requests?

47. What is unusual about variable scope inside a plugin activation callback?

48. What should still remain in a plugin rather than a child theme?

49. What must match when removing a callback with remove_action()?

50. Why must classic themes call wp_head() and wp_footer()?