WordPress WordPress Security & Hardening

Question 1

What is the default WordPress database table prefix, and why is changing it considered a security best practice?

Accepted Answer

It is 'wp_', and changing it makes SQL injection attacks targeting default table names less effective

Answer

It is 'wordpress_', and changing it speeds up database queries

Answer

It is 'db_', and changing it prevents all SQL injection attacks

Answer

It is 'wptable_', and changing it is required for multisite installations

Question 2

Which file in a WordPress installation contains the database credentials and requires the most careful protection?

Accepted Answer

wp-config.php

Answer

functions.php

Answer

.htaccess

Answer

wp-login.php

Question 3

What is the purpose of WordPress authentication keys and salts defined in wp-config.php?

Accepted Answer

They encrypt and secure browser cookies and session tokens, making them harder to forge

Answer

They authenticate the WordPress admin during the login process

Answer

They generate secure passwords for newly created user accounts

Answer

They encrypt the database connection between WordPress and MySQL

Question 4

Which combination of measures is most effective for protecting the WordPress login page against brute force attacks?

Accepted Answer

Limiting login attempts and adding CAPTCHA verification

Answer

Changing the site tagline to something obscure

Answer

Removing the default admin username only

Answer

Disabling comments on all posts and pages

Question 5

What does enabling two-factor authentication (2FA) in WordPress require users to provide at login?

Accepted Answer

Both their password and a secondary verification code from a separate device or app

Answer

Two separate passwords configured during account creation

Answer

A password and their email address confirmed each time they log in

Answer

Two security questions answered correctly before gaining access

Question 6

Which WordPress function should developers use to sanitize plain text input from users before saving it to the database?

Accepted Answer

sanitize_text_field()

Answer

wp_filter_content_tags()

Answer

get_option()

Answer

wp_insert_post()

Question 7

What is the primary security purpose of a WordPress nonce?

Accepted Answer

To verify that a form submission or action request is legitimate and not a cross-site forgery

Answer

To generate unique usernames for newly registered WordPress accounts

Answer

To encrypt post content before storing it in the database

Answer

To create unique download URLs for media files