Acquia Certified Drupal Developer — Questions and Answers
Question 1: What is a 'theme suggestion' in Drupal and how does it enable template overrides?
- A configuration flag that enables dark-mode theming
- A Twig macro that suggests reusable partial templates
- A prioritized list of template filenames Drupal tries before falling back to defaults (Correct answer)
- A CSS class automatically applied to body tags based on content type
Correct answer: A prioritized list of template filenames Drupal tries before falling back to defaults
Theme suggestions give Drupal an ordered list of template filenames to try (e.g., node--article.html.twig before node.html.twig), enabling granular per-bundle overrides.
Question 2: Which Drupal module is designed to compare configuration between environments to detect unintended config drift?
- Diff module
- Config Split combined with Config Inspector (Correct answer)
- Stage File Proxy
- Environment Indicator
Correct answer: Config Split combined with Config Inspector
Config Inspector (and Config Split for environment-specific splits) allows teams to compare active configuration against stored config exports to detect unintended divergence between environments.
Question 3: Which Drush command regenerates CSS/JS aggregate files and clears the Drupal theme registry?
- drush asset:rebuild
- drush theme:rebuild
- drush php:eval drupal_flush_all_caches()
- drush cr (cache:rebuild) (Correct answer)
Correct answer: drush cr (cache:rebuild)
drush cr (cache:rebuild) clears all Drupal caches including the theme registry, asset aggregates, Twig compiled templates, and the service container.
Question 4: Which Drupal security hardening check should QA verify is enabled on a production site to prevent text injection via user input fields?
- Enabling the Drupal shield module
- Configuring trusted host patterns in settings.php
- Filtering user input through an allowed HTML text format with XSS filtering enabled (Correct answer)
- Setting the PHP memory limit above 256MB
Correct answer: Filtering user input through an allowed HTML text format with XSS filtering enabled
Drupal's text format system with XSS filtering strips disallowed HTML tags from user input, preventing cross-site scripting attacks through content fields.
Question 5: What Drupal theme setting enables the display of the site logo, site name, and site slogan in the header?
- They are configured via the system.site configuration object only
- They are set in Appearance > Settings for the active theme (Correct answer)
- They are controlled by block placement in Block Layout
- They are hardcoded in the page.html.twig template
Correct answer: They are set in Appearance > Settings for the active theme
Site logo, name, and slogan visibility are toggled per-theme in Appearance > Settings, which stores the choices in the theme's configuration.
Question 6: How should Drupal professionals handle conflicts with stakeholders?
- Escalate immediately to management
- Address issues professionally through active listening, finding common ground, and seeking resolution (Correct answer)
- Avoid all conflict
- Ignore stakeholder concerns
Correct answer: Address issues professionally through active listening, finding common ground, and seeking resolution
This is fundamental to Drupal practice. Address issues professionally through active listening, finding common ground, and seeking resolution represents the professional standard for communication in the Drupal certification framework.
Question 7: What role does peer review play in Drupal practice?
- It provides quality assurance and professional development through collegial evaluation (Correct answer)
- It creates unnecessary competition
- It is only for beginners
- It replaces formal certification
Correct answer: It provides quality assurance and professional development through collegial evaluation
This is fundamental to Drupal practice. It provides quality assurance and professional development through collegial evaluation represents the professional standard for professional standards in the Drupal certification framework.
Question 8: How should Drupal professionals stay current with regulatory changes?
- Rely on colleagues for updates
- Regulations rarely change
- Wait until audited
- Monitor regulatory updates, participate in professional associations, and attend continuing education (Correct answer)
Correct answer: Monitor regulatory updates, participate in professional associations, and attend continuing education
This is fundamental to Drupal practice. Monitor regulatory updates, participate in professional associations, and attend continuing education represents the professional standard for regulatory in the Drupal certification framework.
Question 9: In Drupal's Twig, what function renders a render array variable into HTML output?
- {{ render(content.field_name) }}
- {% print content.field_name %}
- {{ content.field_name | render }}
- {{ content.field_name }} (Correct answer)
Correct answer: {{ content.field_name }}
In Drupal Twig templates, printing a render array variable with {{ variable }} automatically invokes the render pipeline to output its HTML.
Question 10: In Drupal's testing architecture, what is a 'functional JavaScript test' (FunctionalJavascriptTestCase) used for?
- Validating JS module dependencies
- Unit testing JavaScript utility functions
- Linting JavaScript files for syntax errors
- Testing behaviors that require a real browser with JS execution (Correct answer)
Correct answer: Testing behaviors that require a real browser with JS execution
FunctionalJavascriptTestCase uses WebDriver (via Chromedriver) to run a real browser, enabling testing of AJAX, dynamic content, and other JS-driven behaviors.
Question 11: What risk does running Drupal with PHP's 'register_globals' enabled (on legacy PHP versions) introduce?
- Session cookies are broadcast to all domains in the same TLD
- Drupal's database abstraction layer loses prepared statement support
- PHP runs slower because all globals must be serialized on each request
- Attackers can inject arbitrary variables via URL parameters, potentially overwriting Drupal's internal variables (Correct answer)
Correct answer: Attackers can inject arbitrary variables via URL parameters, potentially overwriting Drupal's internal variables
register_globals allows external input to populate PHP variables, enabling attackers to overwrite security-relevant variables in Drupal's codebase.
Question 12: Which Drupal CSS naming convention is recommended for theme and module stylesheet classes to avoid conflicts?
- Bootstrap CSS grid naming
- BEM (Block Element Modifier) methodology (Correct answer)
- Atomic CSS utility class naming
- OOCSS (Object-Oriented CSS) convention
Correct answer: BEM (Block Element Modifier) methodology
Drupal's coding standards recommend the BEM methodology (block__element--modifier) for CSS class naming to create predictable, conflict-free, component-based stylesheets.
Question 13: What is the benefit of interdisciplinary collaboration in Drupal practice?
- It is only for complex projects
- It slows down decision making
- It brings diverse expertise and perspectives that improve outcomes and innovation (Correct answer)
- It creates confusion
Correct answer: It brings diverse expertise and perspectives that improve outcomes and innovation
This is fundamental to Drupal practice. It brings diverse expertise and perspectives that improve outcomes and innovation represents the professional standard for practical in the Drupal certification framework.
Question 14: How much space does Drupal take?
- 80mb (Correct answer)
- 50mb
- 30mb
- 56mb
Correct answer: 80mb
The base installation of Drupal, without any additional modules or themes, typically requires approximately 80MB of disk space. This figure can vary slightly depending on the specific version and server environment, but 80MB is a common approximate size for the core files needed to run a basic Drupal site.
Question 15: Who originally wrote the Drupal?
- Linda Shaw
- Dries Buytaert (Correct answer)
- Jake Shaw
- Howard Dean
Correct answer: Dries Buytaert
Dries Buytaert is the original creator and project lead of Drupal. He began developing Drupal as a message board system called 'Drop.org' in 1999, and subsequently released it as an open-source project in 2001. Buytaert remains a key figure in the Drupal community and the broader open-source movement.
Question 16: In Drupal's routing system, what file defines URL paths and their corresponding controller classes?
- module_name.routing.yml (Correct answer)
- module_name.services.yml
- module_name.permissions.yml
- module_name.links.menu.yml
Correct answer: module_name.routing.yml
Routes are defined in the module's .routing.yml file, mapping URL paths to controller methods and specifying access requirements.
Question 17: In Drupal theming, what is the purpose of a 'preprocess function' in a .theme file?
- Cache theme suggestion arrays per user role
- Add or modify variables available inside a Twig template (Correct answer)
- Compile SCSS to CSS before the theme renders
- Override a core module's block output
Correct answer: Add or modify variables available inside a Twig template
Preprocess functions (e.g., THEME_preprocess_node()) allow theme PHP code to add, modify, or compute variables that are then passed into corresponding Twig templates.
Question 18: What is the primary competency framework for Drupal professionals?
- Employer-specific requirements only
- Ad-hoc skill development
- Structured competency standards defined by the certifying body (Correct answer)
- Self-assessed capabilities only
Correct answer: Structured competency standards defined by the certifying body
This is fundamental to Drupal practice. Structured competency standards defined by the certifying body represents the professional standard for professional standards in the Drupal certification framework.
Question 19: In a Drupal theme's libraries.yml, what does the 'minified: true' flag tell Drupal?
- Skip this file during automated front-end testing
- Only serve this file when CSS aggregation is enabled
- The file is already minified and Drupal should not attempt to aggregate it further (Correct answer)
- Drupal should automatically minify the file during caching
Correct answer: The file is already minified and Drupal should not attempt to aggregate it further
The 'minified: true' flag tells Drupal's asset aggregation system that the file is already minified so it can skip redundant re-minification during aggregation.
Question 20: What function do hooks provide in Drupal?
- Allow Modules
- Enable Modules
- Allow modules to interacts with Core Drupal (Correct answer)
- Disallow Users
Correct answer: Allow modules to interacts with Core Drupal
Hooks are a fundamental concept in Drupal's modular architecture, providing a mechanism for modules to interact with and alter Drupal's core functionality and other modules. They are specific functions that modules can implement to 'hook into' predefined events or processes within Drupal, allowing for extensive customization and extensibility without modifying core code.
Question 21: How do continuing education requirements benefit Drupal certified professionals?
- They ensure professionals stay current with evolving industry practices and knowledge (Correct answer)
- They reduce practical skills
- They only benefit training providers
- They are unnecessary formalities
Correct answer: They ensure professionals stay current with evolving industry practices and knowledge
This is fundamental to Drupal practice. They ensure professionals stay current with evolving industry practices and knowledge represents the professional standard for professional standards in the Drupal certification framework.
Question 22: What is the significance of a code of conduct for Drupal professionals?
- It limits professional freedom
- It applies only to new practitioners
- It is merely symbolic
- It establishes expected behaviors and ethical standards that protect the public and profession (Correct answer)
Correct answer: It establishes expected behaviors and ethical standards that protect the public and profession
This is fundamental to Drupal practice. It establishes expected behaviors and ethical standards that protect the public and profession represents the professional standard for professional standards in the Drupal certification framework.
Question 23: Which approach best demonstrates evidence-based information architecture design in Drupal?
- Building taxonomy and menu structures based on card sorting and tree testing user research data (Correct answer)
- Copying the navigation structure from a competitor's site
- Using whatever taxonomy structure is easiest to implement
- Letting content editors create all taxonomy terms without governance
Correct answer: Building taxonomy and menu structures based on card sorting and tree testing user research data
Card sorting reveals users' mental models and tree testing validates navigation structures, providing user-generated evidence that should drive Drupal's taxonomy and menu design.
Question 24: What is the role of professional journals in Drupal practice?
- They only benefit academics
- They are outdated by publication time
- They disseminate current research, best practices, and professional developments (Correct answer)
- They are optional reading
Correct answer: They disseminate current research, best practices, and professional developments
This is fundamental to Drupal practice. They disseminate current research, best practices, and professional developments represents the professional standard for research in the Drupal certification framework.
Question 25: How do Drupal professionals maintain digital competency?
- By hiring IT support for all tasks
- Digital skills are not required
- Through ongoing training, practice with new tools, and staying current with technological advances (Correct answer)
- Skills from initial training are sufficient
Correct answer: Through ongoing training, practice with new tools, and staying current with technological advances
This is fundamental to Drupal practice. Through ongoing training, practice with new tools, and staying current with technological advances represents the professional standard for technology in the Drupal certification framework.
Question 26: What is the benefit of standardized digital reporting in Drupal practice?
- It replaces professional communication
- It is only needed for government work
- It ensures consistency, enables comparison, and facilitates regulatory compliance (Correct answer)
- It limits creativity
Correct answer: It ensures consistency, enables comparison, and facilitates regulatory compliance
This is fundamental to Drupal practice. It ensures consistency, enables comparison, and facilitates regulatory compliance represents the professional standard for technology in the Drupal certification framework.
Question 27: What is the primary purpose of regulatory compliance in Drupal practice?
- To create bureaucratic burden
- To limit competition
- To protect public safety, ensure quality standards, and maintain professional accountability (Correct answer)
- To benefit regulators only
Correct answer: To protect public safety, ensure quality standards, and maintain professional accountability
This is fundamental to Drupal practice. To protect public safety, ensure quality standards, and maintain professional accountability represents the professional standard for regulatory in the Drupal certification framework.
Question 28: How should an Drupal professional handle a situation outside their scope of competency?
- Attempt it anyway
- Decline all unfamiliar work
- Recognize limitations and refer to or consult with appropriate specialists (Correct answer)
- Ignore the situation
Correct answer: Recognize limitations and refer to or consult with appropriate specialists
This is fundamental to Drupal practice. Recognize limitations and refer to or consult with appropriate specialists represents the professional standard for professional standards in the Drupal certification framework.
Question 29: In an evidence-based Drupal security audit, which command-line tool scans for known vulnerabilities in installed modules?
- drush pm:security (Correct answer)
- drush core-status
- drush cache:rebuild
- drush updatedb
Correct answer: drush pm:security
`drush pm:security` checks all installed projects against the Drupal Security Advisories feed and reports any known vulnerable versions.
Question 30: What is the correct format for defining a JavaScript library with a dependency on jQuery in a Drupal libraries.yml file?
- import: jquery from core
- requires: jquery/core
- dependencies: - core/jquery (Correct answer)
- dependencies: [jquery]
Correct answer: dependencies: - core/jquery
In Drupal's libraries.yml, dependencies are listed as 'package/library-name' strings under the dependencies key, and Drupal's jQuery is referenced as 'core/jquery'.
Question 31: How should an Drupal professional present complex information to non-experts?
- Provide written reports only
- Use full technical terminology
- Skip complex topics entirely
- Translate into accessible language, use visuals, and check for understanding (Correct answer)
Correct answer: Translate into accessible language, use visuals, and check for understanding
This is fundamental to Drupal practice. Translate into accessible language, use visuals, and check for understanding represents the professional standard for communication in the Drupal certification framework.
Question 32: How should Drupal professionals evaluate new technology tools?
- Wait until competitors adopt first
- Avoid all new technology
- Adopt all new technology immediately
- Assess functionality, reliability, security, cost-effectiveness, and alignment with professional needs (Correct answer)
Correct answer: Assess functionality, reliability, security, cost-effectiveness, and alignment with professional needs
This is fundamental to Drupal practice. Assess functionality, reliability, security, cost-effectiveness, and alignment with professional needs represents the professional standard for technology in the Drupal certification framework.
Question 33: Which Drupal.org resource provides the most reliable evidence when researching whether a module is safe to use in production?
- The number of screenshots in the module's README
- The project's usage statistics, automated test results, issue queue status, and security advisory history (Correct answer)
- The module's marketing description on its homepage
- Whether the module's name sounds professional
Correct answer: The project's usage statistics, automated test results, issue queue status, and security advisory history
Quantitative signals—usage counts, test pass rates, issue resolution rates, and security advisory history—provide objective evidence of a module's production readiness.
Question 34: A Drupal site's risk assessment notes that database credentials are stored in settings.php inside the web root. What is the best remediation?
- Remove read permissions on settings.php for the web server user
- Move settings.php outside the web root or use environment variables for credentials (Correct answer)
- Store credentials in a Drupal config YAML file instead
- Encode the database password in Base64 within settings.php
Correct answer: Move settings.php outside the web root or use environment variables for credentials
Moving settings.php outside the web root or using environment variables ensures credentials are never directly accessible via HTTP even if directory listing is misconfigured.
Question 35: What is the role of the 'Pathauto' module in Drupal site building?
- Generate sitemaps automatically
- Create URL aliases based on configurable patterns (Correct answer)
- Redirect broken URLs to valid paths
- Block bots from crawling admin pages
Correct answer: Create URL aliases based on configurable patterns
Pathauto automatically generates clean URL aliases for nodes, taxonomy terms, and users using token-based patterns.
Question 36: How do you attach a CSS or JS library to a specific Twig template in Drupal?
- Call drupal_add_css() in the theme's .theme file
- List the file in the .info.yml css section
- Use @import in CSS files
- Add {{ attach_library('mytheme/library-name') }} in the Twig file (Correct answer)
Correct answer: Add {{ attach_library('mytheme/library-name') }} in the Twig file
The attach_library() Twig function loads a named library (defined in libraries.yml) only on pages where that template renders, avoiding global CSS/JS bloat.
Question 37: What role does active listening play in Drupal practice?
- It wastes time
- It is only for counseling professionals
- It means staying silent
- It ensures accurate understanding, demonstrates respect, and improves outcomes (Correct answer)
Correct answer: It ensures accurate understanding, demonstrates respect, and improves outcomes
This is fundamental to Drupal practice. It ensures accurate understanding, demonstrates respect, and improves outcomes represents the professional standard for communication in the Drupal certification framework.
Question 38: In Drupal's Twig templating system, how do you safely output a variable to prevent XSS?
- {{ variable | raw }}
- <?php print $variable; ?>
- {{ variable }} (Correct answer)
- {% print variable %}
Correct answer: {{ variable }}
The {{ variable }} syntax in Twig automatically escapes output, preventing XSS attacks; use |raw only when the value is already sanitized markup.
Question 39: Which Drupal API service should be used to send HTTP requests to external APIs from custom code?
- file_get_contents() PHP function
- \Drupal::httpClient() (Guzzle wrapper) (Correct answer)
- http_request() Drupal function
- curl_exec() PHP extension
Correct answer: \Drupal::httpClient() (Guzzle wrapper)
\Drupal::httpClient() returns a pre-configured Guzzle HTTP client that integrates with Drupal's caching and testing infrastructure for external HTTP requests.
Question 40: Which risk does the Drupal 'Trusted Host Settings' configuration ($settings['trusted_host_patterns']) directly mitigate?
- HTTP Host header injection attacks (Correct answer)
- SQL injection through form fields
- Denial of service from excessive cache misses
- Cross-site request forgery (CSRF) on form submissions
Correct answer: HTTP Host header injection attacks
Trusted host patterns prevent attackers from injecting malicious Host headers that could be used in cache poisoning or password reset link attacks.
Question 41: Which approach best demonstrates professional competency in Drupal practice?
- Following only personal preferences
- Integrating continuing education, practical experience, and evidence-based decision making (Correct answer)
- Avoiding challenging situations
- Relying solely on initial training
Correct answer: Integrating continuing education, practical experience, and evidence-based decision making
This is fundamental to Drupal practice. Integrating continuing education, practical experience, and evidence-based decision making represents the professional standard for professional standards in the Drupal certification framework.
Question 42: What is the value of written documentation in Drupal professional communication?
- It replaces verbal communication
- It is only for formal occasions
- It creates permanent records, ensures clarity, and provides legal protection (Correct answer)
- It is optional
Correct answer: It creates permanent records, ensures clarity, and provides legal protection
This is fundamental to Drupal practice. It creates permanent records, ensures clarity, and provides legal protection represents the professional standard for communication in the Drupal certification framework.
Question 43: When researching the root cause of a Drupal site performance regression, which log source provides the most direct evidence?
- Drupal's recent log messages (dblog) combined with server-level slow query logs (Correct answer)
- The Drupal.org issue queue for core
- The Metatag module configuration page
- CKEditor's revision history
Correct answer: Drupal's recent log messages (dblog) combined with server-level slow query logs
Combining Drupal's dblog watchdog entries with MySQL/PostgreSQL slow query logs surfaces both application-level errors and database bottlenecks causing regressions.
Question 44: How has digital technology transformed Drupal practice?
- It has enhanced data collection, analysis, communication, and operational efficiency (Correct answer)
- It has replaced all traditional methods
- It has had no impact
- It only affects large organizations
Correct answer: It has enhanced data collection, analysis, communication, and operational efficiency
This is fundamental to Drupal practice. It has enhanced data collection, analysis, communication, and operational efficiency represents the professional standard for technology in the Drupal certification framework.
Question 45: How do Drupal professionals build trust with clients or stakeholders?
- Through consistent competence, transparency, reliability, and ethical behavior (Correct answer)
- Through competitive pricing only
- Through marketing only
- By always agreeing with clients
Correct answer: Through consistent competence, transparency, reliability, and ethical behavior
This is fundamental to Drupal practice. Through consistent competence, transparency, reliability, and ethical behavior represents the professional standard for communication in the Drupal certification framework.
Question 46: In Drupal, what does enabling Twig debug mode output into the HTML source?
- JavaScript console warnings for deprecated API calls
- Template file paths, theme hook suggestions, and BEGIN/END template comments (Correct answer)
- PHP error logs and database query times
- CSS class names and their originating SCSS files
Correct answer: Template file paths, theme hook suggestions, and BEGIN/END template comments
Twig debug mode injects HTML comments showing the exact template file being used, all candidate theme hook suggestions, and begin/end markers for each template.
Question 47: What Drupal behavior pattern is used to safely attach JavaScript functionality to dynamically loaded AJAX content?
- DOMContentLoaded event listeners
- jQuery .ready() document handlers
- window.onload event listeners
- Drupal.behaviors with attach() and detach() methods (Correct answer)
Correct answer: Drupal.behaviors with attach() and detach() methods
Drupal.behaviors objects with attach() methods are called both on full page load and after every AJAX response, ensuring JS initializes correctly on dynamic content.
Question 48: Which Drupal core theme is commonly used as a base theme for building administration-style custom themes?
- Seven
- Bartik
- Stable9 (Correct answer)
- Claro
Correct answer: Stable9
Stable9 (previously Stable) provides empty template files and no CSS, making it the cleanest base theme for fully custom themes that need no inherited styles.
Question 49: What is the most effective communication approach for Drupal professionals?
- Using technical language exclusively
- Minimizing all communications
- Adapting communication style to the audience while maintaining accuracy and clarity (Correct answer)
- Only written communication
Correct answer: Adapting communication style to the audience while maintaining accuracy and clarity
This is fundamental to Drupal practice. Adapting communication style to the audience while maintaining accuracy and clarity represents the professional standard for communication in the Drupal certification framework.
Question 50: In Drupal theming, what is the difference between a 'template_preprocess' hook and a theme-specific 'THEME_preprocess' hook?
- template_preprocess runs in modules; THEME_preprocess runs last and can override module variables (Correct answer)
- template_preprocess is deprecated; THEME_preprocess is the only supported pattern
- template_preprocess only works for node templates; THEME_preprocess works for all entity types
- template_preprocess runs after rendering; THEME_preprocess runs before asset attachment
Correct answer: template_preprocess runs in modules; THEME_preprocess runs last and can override module variables
template_preprocess hooks in modules run first to set default variables; THEME_preprocess hooks in the active theme run last, giving themes final control to override or extend variables.
Question 51: What is the purpose of the 'breakpoints.yml' file in a Drupal theme?
- Set CSS media query values for the theme's grid system
- Declare responsive image breakpoints used by core's Responsive Image module (Correct answer)
- Define JavaScript event listeners for window resize events
- Configure server-side adaptive theme switching per device type
Correct answer: Declare responsive image breakpoints used by core's Responsive Image module
A theme's breakpoints.yml file registers named breakpoints (e.g., mobile, tablet, desktop) that the core Responsive Image module uses to serve appropriately sized images.
Question 52: What does Drupal's BigPipe module primarily accomplish?
- Caches all database queries in memory
- Streams cacheable page parts immediately while lazy-loading uncacheable placeholders (Correct answer)
- Compresses CSS and JavaScript files into a single bundle
- Minifies HTML output before delivery
Correct answer: Streams cacheable page parts immediately while lazy-loading uncacheable placeholders
BigPipe improves perceived performance by streaming the cacheable portions of a page to the browser first, then filling in non-cacheable placeholders asynchronously.
Question 53: Which Drupal theming approach allows you to override a contrib module's template from your custom theme?
- Add the module template directory to the theme's info.yml
- Copy the template to themes/custom/mytheme/templates/ with the same filename (Correct answer)
- Declare an override in the theme's .breakpoints.yml
- Create a hook_theme_registry_alter() to redirect the path
Correct answer: Copy the template to themes/custom/mytheme/templates/ with the same filename
Placing a template file with the same name inside your theme's templates directory causes Drupal to use your copy instead of the module's original template.
Question 54: What is the role of a 'test fixture' in Drupal automated testing?
- A YAML file that declares which test classes belong to a test group
- Pre-created content, configuration, or data used to set up a known state for tests (Correct answer)
- A module that mocks third-party API responses
- A Drush command that seeds the database with random content
Correct answer: Pre-created content, configuration, or data used to set up a known state for tests
Test fixtures establish a deterministic starting state (nodes, users, config) so that each test runs against consistent data and produces reproducible results.
Question 55: Which Drupal API function is used to implement a hook that reacts after a node is saved?
- hook_node_presave()
- hook_node_save_complete()
- hook_node_insert() (Correct answer)
- hook_entity_postsave()
Correct answer: hook_node_insert()
hook_node_insert() fires after a new node is saved to the database for the first time, while hook_node_update() fires on subsequent saves.
Question 56: An organization accepts the risk of running an end-of-life Drupal version on an isolated internal tool. Which risk management strategy does this represent?
- Risk transference by purchasing cyber insurance
- Risk avoidance by decommissioning the tool
- Risk acceptance with documented justification (Correct answer)
- Risk mitigation through emergency patching
Correct answer: Risk acceptance with documented justification
Consciously deciding to tolerate a known risk with formal documentation is the definition of risk acceptance.
Question 57: What role does data analytics play in Drupal practice?
- It creates unnecessary complexity
- It supports evidence-based decision making by identifying patterns and trends in relevant data (Correct answer)
- It replaces professional judgment
- It is only for IT professionals
Correct answer: It supports evidence-based decision making by identifying patterns and trends in relevant data
This is fundamental to Drupal practice. It supports evidence-based decision making by identifying patterns and trends in relevant data represents the professional standard for technology in the Drupal certification framework.
Question 58: What is the importance of data security in Drupal digital applications?
- Security is unnecessary for professional data
- Protecting sensitive information from unauthorized access, breaches, and loss is essential (Correct answer)
- Only financial data needs protection
- Security slows down work
Correct answer: Protecting sensitive information from unauthorized access, breaches, and loss is essential
This is fundamental to Drupal practice. Protecting sensitive information from unauthorized access, breaches, and loss is essential represents the professional standard for technology in the Drupal certification framework.
Question 59: What does the `--filter` flag do when running Drupal PHPUnit tests via the CLI?
- Runs only tests matching a given name or pattern (Correct answer)
- Filters log output to warnings only
- Filters out deprecated test methods
- Excludes slow tests from the suite
Correct answer: Runs only tests matching a given name or pattern
The `--filter` flag narrows the test run to only those test cases or methods whose names match the provided string or regex pattern.
Question 60: How is Drupal set up for blogs?
- Using My SQL
- Plugins (Correct answer)
- Using PHP
- Using Plugins and PHP Code
Correct answer: Plugins
Drupal's flexibility allows it to be set up for blogs primarily through the use of modules, which are often referred to as plugins in a broader sense. While core Drupal provides basic node functionality, specific modules (like the 'Blog' module or custom content types with fields) extend this to create a full-featured blogging platform with features like comments, categories, and authoring tools.
Acquia Certified Drupal Developer
The Acquia Certified Drupal Developer exam validates skills and knowledge in fundamental web development concepts, Drupal site building, front end theming, and back end module development. It is the flagship developer certification offered by Acquia for the Drupal CMS platform.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds
These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- docs.acquia.com — Retake fee, retake policy, score release, exam format, passing score, time limit, score validity, test delivery, eligibility, registration deadline · verified Oct 2026
- acquia.com — Fees, exam format, passing score, time limit · verified Oct 2026