Drupal Research & Evidence-Based Practice 4

Question 1

In an evidence-based Drupal security audit, which command-line tool scans for known vulnerabilities in installed modules?

Accepted Answer

drush pm:security

Answer

`drush pm:security` checks all installed projects against the Drupal Security Advisories feed and reports any known vulnerable versions.

Question 2

Which practice best supports evidence-based quality assurance when developing a custom Drupal module?

Accepted Answer

Writing PHPUnit and Kernel tests that cover critical paths before deployment

Answer

Automated PHPUnit and Kernel tests create a reproducible evidence base that custom logic behaves correctly under defined conditions.

Question 3

What role does Drupal's Automated Testing (DTT) framework play in evidence-based development?

Accepted Answer

It provides a structured harness for functional, kernel, and unit tests that validate behavior objectively

Answer

Drupal Testing Traits (DTT) extends PHPUnit to enable functional browser tests, providing objective, repeatable evidence that Drupal sites work as specified.

Question 4

When researching the root cause of a Drupal site performance regression, which log source provides the most direct evidence?

Accepted Answer

Drupal's recent log messages (dblog) combined with server-level slow query logs

Answer

Combining Drupal's dblog watchdog entries with MySQL/PostgreSQL slow query logs surfaces both application-level errors and database bottlenecks causing regressions.

Question 5

Which Drupal contrib module supports evidence-based editorial workflows by tracking content revision history and authorship?

Accepted Answer

Content Moderation (core)

Answer

Drupal core's Content Moderation module records revision history, state transitions, and authors, creating an auditable evidence trail for editorial decisions.

Drupal Practice Test

Drupal Practice Test

Drupal Research & Evidence-Based Practice 4