Drupal Professional Standards & Competencies 2

Question 1

Which Drupal community resource serves as the primary hub for reporting security vulnerabilities in contributed modules?

Accepted Answer

drupal.org/security

Answer

The Drupal Security Team publishes all advisories and accepts vulnerability reports at drupal.org/security.

Question 2

A client asks you to keep their Drupal site on an end-of-life core version to avoid migration costs. What is the professionally appropriate response?

Accepted Answer

Document the risk in writing and strongly recommend upgrading

Answer

Documenting risks in writing protects both parties and upholds professional duty to inform the client of security exposure.

Question 3

What does the Drupal Certified Developer exam primarily validate?

Accepted Answer

Core competency in Drupal site building, module development, and best practices

Answer

The Drupal Certified Developer credential tests broad core competencies including site building, module development, and adherence to best practices.

Question 4

When contributing a new module to Drupal.org, which license must your code use?

Accepted Answer

GPL-2.0-or-later

Answer

All code hosted on Drupal.org must be licensed under GPL-2.0-or-later to maintain Drupal's open-source license compatibility.

Question 5

Which practice best demonstrates a Drupal developer's commitment to backward compatibility when releasing a module update?

Accepted Answer

Incrementing the major version for any API change and following semantic versioning

Answer

Following semantic versioning and incrementing the major version signals breaking changes, allowing site owners to test before upgrading.

Drupal Practice Test