Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Wordpress > Security > Flashcards

Security Flashcards

1
Q

Q: Why is WordPress security important?

A

A: To protect your website from hackers, malware, data breaches, and ensure the safety of user information and site functionality.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Q: What is the most common way WordPress sites get hacked?

A

A: Through outdated plugins, themes, or WordPress core files.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Q: Why are regular updates critical for WordPress security?

A

A: Updates often patch security vulnerabilities in WordPress core, plugins, and themes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Q: What is the WordPress security model based on?

A

A: It’s based on user roles and capabilities to control access and permissions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Q: What is a strong password, and why is it important?

A

A: A strong password includes uppercase and lowercase letters, numbers, and special characters. It minimizes the risk of brute-force attacks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Q: How can you enforce strong passwords in WordPress?

A

A: Use a plugin like “Force Strong Passwords” to require strong passwords for all users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Q: What is two-factor authentication (2FA)?

A

A: A security measure requiring users to verify their identity with a second factor, like a mobile app or email code.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Q: How can you limit login attempts in WordPress?

A

A: Use a plugin like “Limit Login Attempts Reloaded” to restrict the number of failed login attempts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Q: Why is it important to use plugins and themes from reputable sources?

A

A: To avoid installing malicious or poorly coded software that can create security vulnerabilities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Q: How can you check if a plugin is safe to use?

A

A: Check its reviews, update history, compatibility with the latest WordPress version, and developer credibility.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Q: Why should you delete unused themes and plugins?

A

A: Unused themes and plugins can still pose security risks if they contain vulnerabilities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Q: What are nulled themes or plugins, and why should you avoid them?

A

A: Nulled themes/plugins are pirated versions that often contain malware or backdoors.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Q: What is the purpose of the wp-config.php file?

A

A: It contains crucial settings, including database credentials, security keys, and other configuration details.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Q: How can you secure the wp-config.php file?

A

A: Move it to a non-public directory or restrict its access via .htaccess.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Q: What is the WordPress SALT key, and why is it important?

A

A: SALT keys encrypt cookies and login data, enhancing security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Q: What does disabling file editing in WordPress do?

A

A: Prevents users from editing theme and plugin files directly from the dashboard, reducing risks from compromised accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Q: Why is using HTTPS important for WordPress security?

A

A: HTTPS encrypts data between the browser and server, protecting sensitive information like passwords and credit card details.

18
Q

Q: How can you enable HTTPS on your site?

A

A: Install an SSL certificate and configure your site to use HTTPS via WordPress settings or a plugin like “Really Simple SSL.”

19
Q

Q: What is the purpose of file permissions in WordPress?

A

A: File permissions control who can read, write, or execute files, preventing unauthorized access.

20
Q

Q: What is a Web Application Firewall (WAF), and why is it useful?

A

A: A WAF protects your site by filtering and blocking malicious traffic before it reaches your server.

21
Q

Q: Why are regular backups important for security?

A

A: Backups allow you to restore your site if it’s hacked, infected with malware, or experiences data loss.

22
Q

Q: How often should you back up your WordPress site?

A

A: Regularly, depending on how frequently your site changes (daily or weekly for active sites).

23
Q

Q: Name two popular WordPress backup plugins.

A

A: UpdraftPlus and BackupBuddy.

24
Q

Q: Where should you store your backups?

A

A: Offsite locations, such as cloud storage (Google Drive, Dropbox) or external servers.

25
Q

Q: What is malware?

A

A: Malicious software designed to disrupt, damage, or gain unauthorized access to systems.

26
Q

Q: How can you detect malware on your WordPress site?

A

A: Use security plugins like Wordfence, Sucuri, or iThemes Security to scan for malicious files.

27
Q

Q: What should you do if malware is detected on your site?

A

A: Restore a clean backup, remove infected files, and strengthen your security measures.

28
Q

Q: What is a backdoor in WordPress?

A

A: A backdoor is malicious code that allows attackers to bypass normal authentication and gain access to your site.

29
Q

Q: Why is it important to change the WordPress database prefix?

A

A: To make it harder for attackers to guess table names and exploit SQL injection vulnerabilities.

30
Q

Q: How can you secure your WordPress database?

A

A: Use a strong database password, change the table prefix, and limit database user privileges.

31
Q

Q: What is an SQL injection attack?

A

A: An attack that exploits vulnerabilities to manipulate the database and steal or delete data.

32
Q

Q: How can activity logs improve WordPress security?

A

A: They help track changes, user logins, and suspicious activity on your site.

33
Q

Q: Name a plugin for monitoring activity logs in WordPress.

A

A: WP Activity Log.

34
Q

Q: What is uptime monitoring, and why is it important?

A

A: Uptime monitoring alerts you when your site goes offline, helping identify potential attacks or server issues.

35
Q

Q: What is IP whitelisting?

A

A: Allowing access to your site or admin area only from specific IP addresses.

36
Q

Q: How can you protect your WordPress admin area?

A

A: Change the default admin URL, enable 2FA, and restrict access to trusted IPs.

37
Q

Q: What is reCAPTCHA, and how does it improve security?

A

A: reCAPTCHA prevents bots and spam by requiring users to verify they are human.

38
Q

Q: What is the role of the .htaccess file in WordPress security?

A

A: It can restrict access to sensitive files, prevent directory browsing, and block malicious requests.

39
Q

Q: Why should you remove default admin accounts?

A

A: Default accounts are easy targets for attackers. Use unique usernames instead.

40
Q

Q: What is the best way to handle security notifications?

A

A: Set up alerts in security plugins to receive real-time notifications about suspicious activities.

41
Q

Q: How can you prevent brute-force attacks?

A

A: Use strong passwords, 2FA, and a plugin that limits login attempts.

42
Q

Q: Why is it important to audit your plugins and themes periodically?

A

A: To remove outdated or unused ones that could introduce vulnerabilities.

Wordpress (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions