Drupal Drupal Performance & Security 3

Question 1

What security benefit does configuring Drupal's private file system provide compared to the public file system?

Accepted Answer

Files are served through PHP so Drupal can enforce access controls before delivery

Answer

Private files are automatically encrypted at rest on the server's filesystem

Answer

Private files are stored outside the web root to prevent direct URL access

Answer

Drupal scans private files for malware before allowing downloads

Question 2

What file permission mode is recommended for settings.php after Drupal installation is complete?

Accepted Answer

444 or 640 to make the file read-only and prevent unauthorized modification

Answer

777 to allow the web server to read and write configuration changes

Answer

644 so the owner can write and the web server can read it

Answer

755 to allow execution by all users including the web server

Question 3

What is a 'cache stampede' in the context of Drupal performance?

Accepted Answer

When multiple simultaneous requests all try to rebuild the same expired cache entry at once

Answer

When administrators clear the cache too frequently, degrading site performance

Answer

When corrupted cache data causes render errors across multiple pages

Answer

When cache storage fills up and starts evicting recently stored entries

Question 4

What does Drupal's Dynamic Page Cache module cache, and who does it benefit?

Accepted Answer

Pages minus personalized sections, using cache contexts to serve cached content to authenticated users

Answer

Full rendered pages for anonymous users only, stored in the database

Answer

Only block regions to speed up theme rendering for all users

Answer

Database query results shared across all users regardless of permissions

Question 5

What is the role of Content Security Policy (CSP) headers in Drupal security?

Accepted Answer

They instruct browsers to load resources only from approved sources, mitigating XSS attacks

Answer

They restrict which content types authenticated users are permitted to create

Answer

They limit the maximum upload size and file types accepted by Drupal forms

Answer

They control how search engines are permitted to index sensitive site content

Question 6

What does Drupal's render cache store, and how does it differ from the page cache?

Accepted Answer

It caches individual render arrays such as blocks and fields based on cache contexts, tags, and max-age

Answer

It stores complete HTML pages for anonymous users, identical to the Internal Page Cache

Answer

It pre-renders all pages during cron execution so they are ready before users request them

Answer

It stores compiled Twig templates to avoid re-parsing theme files on each request

Question 7

Which Drupal configuration setting helps prevent information disclosure by controlling what error details are shown to site visitors?

Accepted Answer

Setting 'error_level' to 'hide' in settings.php so PHP errors are logged but not displayed

Answer

Enabling the Syslog module to redirect errors away from the screen

Answer

Disabling the Database Logging module so errors are not stored anywhere

Answer

Setting the site to 'maintenance mode' to block all user access during errors