WordPress Professional Standards & Competencies 2 — Questions and Answers
Question 1: A client asks you to install a nulled (pirated) premium plugin to save costs. What is the professional response?
- Install it since the client is paying for your time
- Decline and explain the security and legal risks of nulled plugins (Correct answer)
- Install it in a staging environment only
- Ask the client to sign a liability waiver first
Correct answer: Decline and explain the security and legal risks of nulled plugins
Nulled plugins often contain malware and violate GPL licensing; a professional must decline and educate the client on the risks.
Question 2: Which practice best demonstrates professional WordPress site documentation?
- Keeping all credentials in a shared Slack channel
- Maintaining a README with hosting details, plugin list, and deployment steps (Correct answer)
- Storing passwords in the WordPress admin notes field
- Documenting only the custom theme code
Correct answer: Maintaining a README with hosting details, plugin list, and deployment steps
A comprehensive README covering hosting, plugins, and deployment ensures any future developer or client can maintain the site.
Question 3: A client's site is hacked after launch. You had recommended a security plugin they declined. What is the most professional course of action?
- Decline to help since they ignored your advice
- Charge triple rates as a penalty for not listening
- Help remediate the site and document the incident and prior recommendation in writing (Correct answer)
- Immediately restore from a backup without notifying the client
Correct answer: Help remediate the site and document the incident and prior recommendation in writing
A professional assists with remediation while maintaining records that they had advised against the configuration that led to the breach.
Question 4: What does 'scope creep' mean in a WordPress project context?
- A plugin that gradually increases server resource usage
- Uncontrolled expansion of project requirements beyond the original agreement (Correct answer)
- A WordPress core update that changes plugin behavior
- Gradual decline in site performance over time
Correct answer: Uncontrolled expansion of project requirements beyond the original agreement
Scope creep occurs when clients add requirements beyond the original contract, which can impact timelines and budgets.
Question 5: When handing off a completed WordPress site to a client, which security step is most critical?
- Leaving your admin account active for 30 days in case issues arise
- Removing your own admin account and transferring full ownership to the client (Correct answer)
- Changing the site's theme to a free one to reduce costs
- Disabling automatic updates so the client controls changes
Correct answer: Removing your own admin account and transferring full ownership to the client
Removing developer access and transferring full ownership is essential to client security and professional responsibility.
Question 6: A professional WordPress developer should keep plugin and theme licenses under whose account?
- Always under the developer's personal account for easy management
- Always under the client's account so they control their own licenses (Correct answer)
- In a shared account between developer and client
- Under the hosting company's account
Correct answer: Always under the client's account so they control their own licenses
Licenses should belong to the client so they retain full control of their assets even if the developer relationship ends.
Question 7: Which approach reflects professional competency when a client requests a feature outside your WordPress expertise?
- Attempt to build it without disclosing your limitations
- Decline the project entirely
- Be transparent about your limitations and refer to or partner with a specialist (Correct answer)
- Charge extra and figure it out during development
Correct answer: Be transparent about your limitations and refer to or partner with a specialist
Transparency about skill gaps and referring to specialists protects the client's project and upholds professional integrity.
WordPress Professional Standards & Competencies 2
A client asks you to install a nulled (pirated) premium plugin to save costs.
What is the professional response?