Drupal Professional Standards & Competencies 4

Question 1

Which tool do Drupal developers use to enforce coding standards automatically during development?

Accepted Answer

PHP_CodeSniffer with the Drupal ruleset

Answer

PHP_CodeSniffer with the Drupal and DrupalPractice sniff sets automatically detects coding standard violations in Drupal projects.

Question 2

A project manager requests a feature that requires bypassing Drupal's entity access API. What is the professionally correct action?

Accepted Answer

Explain the security implications and propose an access-compliant alternative

Answer

Bypassing Drupal's entity access system creates privilege escalation risks; a professional must communicate this and offer a compliant design.

Question 3

What is the purpose of the Drupal Rector tool in a professional workflow?

Accepted Answer

Automatically refactoring deprecated Drupal API calls to their modern equivalents

Answer

Drupal Rector uses PHP-Parser rules to automatically update deprecated API usage, easing major version upgrades.

Question 4

Which approach to configuration management is considered a Drupal best practice on professional projects?

Accepted Answer

Using Drupal's Configuration Management Initiative (CMI) to export config to YAML files tracked in version control

Answer

CMI YAML exports in version control enable reproducible deployments, peer review of configuration changes, and rollback capability.

Question 5

A Drupal developer discovers a security vulnerability in a widely-used contrib module. What is the responsible disclosure process?

Accepted Answer

Report it privately to the Drupal Security Team via the designated contact form

Answer

Responsible disclosure requires private reporting to the Drupal Security Team, who coordinate a fix and coordinated public release with the maintainer.

Drupal Practice Test

Drupal Practice Test

Drupal Professional Standards & Competencies 4