Drupal Professional Standards & Competencies 3

Question 1

What is the recommended way for a Drupal professional to stay current with security advisories affecting their client sites?

Accepted Answer

Subscribe to the drupal.org security advisories mailing list

Answer

The official security advisories mailing list delivers timely notices directly, ensuring prompt awareness of vulnerabilities.

Question 2

In a professional Drupal project, who is typically responsible for triaging and resolving security issues flagged by the Drupal Security Team?

Accepted Answer

The module or theme maintainer listed on Drupal.org

Answer

The Drupal Security Team works directly with the listed maintainer of the affected project to coordinate a fix and advisory release.

Question 3

Which coding standard does the Drupal community officially use for PHP code style compliance?

Accepted Answer

Drupal Coding Standards (based on PSR-2 with Drupal-specific extensions)

Answer

Drupal maintains its own coding standards document that extends common PHP conventions with Drupal-specific rules enforced by PHP_CodeSniffer.

Question 4

A Drupal professional is hired to audit a site and discovers the previous developer disabled update notifications. What should they do first?

Accepted Answer

Re-enable the Update Manager module and run a status report

Answer

Re-enabling the Update Manager and reviewing the status report gives a clear picture of outdated or vulnerable components before any action is taken.

Question 5

Which principle should guide a Drupal developer's decision between writing custom code versus using an existing contributed module?

Accepted Answer

Prefer well-maintained contributed modules to reduce long-term maintenance burden

Answer

Reusing well-maintained community modules reduces duplication, leverages community security support, and lowers long-term maintenance costs.

Drupal Practice Test