WordPress WordPress Security & Hardening 3

Question 1

What does enabling HTTPS/SSL on a WordPress site primarily protect against?

Accepted Answer

Interception of data transmitted between the user's browser and the web server

Answer

SQL injection attacks targeting the WordPress database

Answer

Brute force login attempts against the wp-admin panel

Answer

Unauthorized installation of malicious plugins by attackers

Question 2

What is a Content Security Policy (CSP) and how does it protect a WordPress site?

Accepted Answer

An HTTP header that restricts which sources can load scripts and resources, reducing XSS attack risk

Answer

A WordPress plugin that scans content for policy violations before publishing

Answer

A database setting that validates and sanitizes content before it is stored

Answer

A hosting firewall configuration that blocks requests from specific IP addresses

Question 3

What is the primary security benefit of keeping WordPress core, themes, and plugins updated promptly?

Accepted Answer

Updates patch known security vulnerabilities that attackers actively scan for and exploit

Answer

Updates improve WordPress page load speed by optimizing database queries

Answer

Updates add new design features that make the site more appealing to visitors

Answer

Updates reduce hosting costs by decreasing overall server resource consumption

Question 4

What does a WordPress malware scanner primarily check for during a security scan?

Accepted Answer

Modified core files, injected malicious code, and signatures matching known malware

Answer

Spelling and grammar errors within published post and page content

Answer

Broken internal links and missing images throughout the site

Answer

SEO issues such as missing meta descriptions and duplicate page titles

Question 5

Which approach best protects the WordPress wp-admin directory from unauthorized access attempts?

Accepted Answer

Restricting access by IP address and adding HTTP basic authentication at the server level

Answer

Only changing the default admin username from 'admin' to something unique

Answer

Installing a free security theme with built-in admin panel protection features

Answer

Enabling WordPress maintenance mode during non-business hours

Question 6

What is the security purpose of maintaining a WordPress activity log or audit trail?

Accepted Answer

To record all user actions and changes so suspicious activity can be detected and investigated after the fact

Answer

To log page view counts and visitor statistics for site analytics reporting

Answer

To track affiliate link clicks and measure marketing conversion rates

Answer

To monitor server CPU and memory usage for performance optimization

Question 7

Which security measure prevents WordPress from revealing its version number to potential attackers?

Accepted Answer

Removing the version meta tag from the header using a function in functions.php

Answer

Changing the WordPress permalink structure to numeric post IDs

Answer

Disabling the WordPress REST API entirely through a plugin

Answer

Setting the DISALLOW_FILE_MODS constant to true in wp-config.php