WordPress WordPress Security & Hardening 3

Question 1

What does enabling HTTPS/SSL on a WordPress site primarily protect against?

Accepted Answer

Interception of data transmitted between the user's browser and the web server

Answer

HTTPS uses SSL/TLS encryption to secure data in transit, protecting login credentials, personal data, and form submissions from being intercepted by man-in-the-middle attacks.

Question 2

What is a Content Security Policy (CSP) and how does it protect a WordPress site?

Accepted Answer

An HTTP header that restricts which sources can load scripts and resources, reducing XSS attack risk

Answer

CSP is an HTTP response header instructing browsers to only execute scripts and load resources from trusted sources, significantly reducing the effectiveness of cross-site scripting (XSS) attacks.

Question 3

What is the primary security benefit of keeping WordPress core, themes, and plugins updated promptly?

Accepted Answer

Updates patch known security vulnerabilities that attackers actively scan for and exploit

Answer

The majority of WordPress hacks exploit known vulnerabilities in outdated software; applying updates closes these security holes before attackers can exploit unpatched installations.

Question 4

What does a WordPress malware scanner primarily check for during a security scan?

Accepted Answer

Modified core files, injected malicious code, and signatures matching known malware

Answer

Malware scanners compare WordPress files against known clean versions, detect unauthorized code injections, and identify file patterns matching known malware signatures.

Question 5

Which approach best protects the WordPress wp-admin directory from unauthorized access attempts?

Accepted Answer

Restricting access by IP address and adding HTTP basic authentication at the server level

Answer

IP restrictions limit wp-admin access to known addresses, and HTTP basic authentication adds a second password challenge before WordPress loads, blocking automated scanning tools.

WordPress Practice Test

WordPress Practice Test

WordPress WordPress Security & Hardening 3