WordPress Risk Assessment & Management 2

Question 1

Which WordPress feature allows you to limit the number of login attempts to reduce brute-force attack risk?

Accepted Answer

Third-party plugin such as Limit Login Attempts Reloaded

Answer

WordPress core does not natively limit login attempts, so a dedicated plugin is required to mitigate brute-force risk.

Question 2

A WordPress site stores user credit card numbers in the database. Which risk category does this primarily represent?

Accepted Answer

Compliance and legal risk

Answer

Storing unencrypted payment card data violates PCI DSS regulations, making it primarily a compliance and legal risk.

Question 3

What does a WordPress site's threat model help you determine?

Accepted Answer

Which specific threats are most likely and impactful for your site

Answer

A threat model identifies likely attackers, attack vectors, and potential impacts specific to your site's context.

Question 4

When evaluating a third-party plugin for risk, which factor is LEAST important?

Accepted Answer

Plugin author's social media follower count

Answer

Social media followers have no bearing on a plugin's security quality or maintenance status.

Question 5

Which WordPress configuration change reduces the risk of exposing sensitive file paths in error messages?

Accepted Answer

Setting WP_DEBUG to false in production

Answer

Disabling WP_DEBUG in production prevents detailed error messages and file paths from being displayed to visitors.

WordPress Practice Test