Security & Backup WordPress MCQs

1. Which plugin is commonly used for WordPress security?
(A) Yoast SEO
(B) Wordfence
(C) Elementor
(D) WooCommerce

2. What does SSL stand for in WordPress security?
(A) Secure Site Login
(B) Secure Sockets Layer
(C) System Security Layer
(D) Safe Secure Login

3. Which of the following is a recommended way to protect the WordPress admin area?
(A) Use “admin” as username
(B) Strong password and 2FA
(C) Disable SSL
(D) Keep plugins outdated

4. What is the default login URL for WordPress?
(A) /login
(B) /wp-login.php
(C) /admin
(D) /dashboard

5. Which role has the highest level of control in WordPress?
(A) Editor
(B) Contributor
(C) Author
(D) Administrator

6. Which plugin is popular for WordPress backups?
(A) UpdraftPlus
(B) Akismet
(C) WooCommerce
(D) Jetpack SEO

7. What is the best practice for updating WordPress?
(A) Disable updates
(B) Update core, plugins, and themes regularly
(C) Only update plugins
(D) Update once a year

8. To prevent brute-force login attacks, you can:
(A) Limit login attempts
(B) Remove themes
(C) Disable caching
(D) Change permalink structure

9. A backup of a WordPress site should ideally include:
(A) Only posts
(B) Database and files
(C) Only media library
(D) Only themes

10. Which file contains database connection details in WordPress?
(A) functions.php
(B) wp-config.php
(C) index.php
(D) wp-settings.php

11. What does 2FA stand for?
(A) Two Factor Authentication
(B) Two File Access
(C) Two Function Admin
(D) Two Fast Access

12. Which plugin helps with login security in WordPress?
(A) WPForms
(B) iThemes Security
(C) WooCommerce
(D) WPBakery

13. To prevent SQL injection, WordPress developers should:
(A) Use prepared statements and sanitization
(B) Use weak passwords
(C) Disable plugins
(D) Allow direct database queries

14. The WordPress security key stored in wp-config.php is called:
(A) Database key
(B) Authentication unique keys and salts
(C) Password key
(D) Theme key

15. Which of the following helps protect WordPress from spam comments?
(A) Jetpack
(B) Akismet
(C) WooCommerce
(D) WP Rocket

16. A common method to secure wp-admin directory is:
(A) Password protect with .htaccess
(B) Delete the directory
(C) Disable plugins
(D) Remove users

17. Which type of backup is fastest?
(A) Full backup
(B) Incremental backup
(C) Differential backup
(D) Manual backup

18. Which of the following is NOT a recommended WordPress security practice?
(A) Keeping WordPress updated
(B) Using admin as username
(C) Installing security plugins
(D) Regular backups

19. What is the default database table prefix in WordPress?
(A) db_
(B) sql_
(C) wp_
(D) wpdb_

20. To hide WordPress version number, you should:
(A) Edit functions.php
(B) Delete wp-admin
(C) Change permalink structure
(D) Remove all users

21. Which malware scanner plugin is commonly used in WordPress?
(A) WP Mail SMTP
(B) Sucuri
(C) WooCommerce
(D) WP Rocket

22. Which backup plugin allows cloud storage like Google Drive?
(A) Elementor
(B) UpdraftPlus
(C) Yoast SEO
(D) WPForms

23. What does CAPTCHA protect against?
(A) Spam bots and automated logins
(B) SQL injection
(C) Malware
(D) Theme updates

24. What is the benefit of changing the WordPress login URL?
(A) Prevent brute-force attacks
(B) Faster backups
(C) Improved SEO
(D) More plugins

25. Which of the following is a reliable method of WordPress backup?
(A) Manual backup via cPanel
(B) Backup plugin
(C) Cloud backup
(D) All of the above

26. WP-CLI can be used for:
(A) Managing security
(B) Managing backups
(C) Updating WordPress
(D) All of the above

27. To protect against XSS attacks, you should:
(A) Use proper data sanitization and escaping
(B) Disable all plugins
(C) Use a weak password
(D) Allow iframe injections

28. Which of the following is a premium WordPress backup plugin?
(A) UpdraftPlus Premium
(B) WP Bakery
(C) Contact Form 7
(D) WooCommerce

29. Why should you change the default “wp_” table prefix?
(A) Better SEO
(B) Faster queries
(C) Security against SQL injection
(D) More storage

30. Which security practice helps secure file permissions?
(A) Set wp-config.php to 400 or 440
(B) Give 777 permission to all files
(C) Make themes writable to all
(D) None of the above

31. Backups should be stored:
(A) Only on the same server
(B) On remote/offsite storage
(C) In the themes folder
(D) Only in wp-admin

32. What is the best way to recover from a hacked WordPress site?
(A) Restore from a clean backup
(B) Delete wp-admin only
(C) Change permalink structure
(D) Disable plugins

33. What does reCAPTCHA stand for?
(A) Remote CAPTCHA
(B) Reverse Turing Test CAPTCHA
(C) Completely Automated Public Turing test to tell Computers and Humans Apart
(D) Real CAPTCHA

34. Which file should you edit to disable file editing in WordPress Dashboard?
(A) wp-config.php
(B) functions.php
(C) index.php
(D) style.css

35. To schedule automatic backups in WordPress, you can use:
(A) UpdraftPlus
(B) Jetpack
(C) WP Rocket
(D) Contact Form 7

36. Which type of SSL certificate provides the highest trust level?
(A) Domain Validation (DV)
(B) Organization Validation (OV)
(C) Extended Validation (EV)
(D) Free SSL

37. WordPress recommends passwords that are:
(A) At least 8 characters, mixed symbols, numbers, and letters
(B) Only numbers
(C) Only lowercase letters
(D) Same as username

38. Which firewall can be used to secure WordPress sites?
(A) Wordfence Firewall
(B) Apache
(C) WooCommerce
(D) Elementor

39. Which of the following is a manual backup method?
(A) Export database via phpMyAdmin
(B) Download files via FTP
(C) Copy wp-config.php and wp-content
(D) All of the above

40. What is the main purpose of backups?
(A) Faster SEO
(B) Website recovery after errors or attacks
(C) Install new themes
(D) Create more plugins

41. Which WordPress file stores security salts?
(A) .htaccess
(B) wp-config.php
(C) functions.php
(D) style.css

42. To secure wp-admin login, you can add:
(A) reCAPTCHA
(B) Two-Factor Authentication
(C) Strong passwords
(D) All of the above

43. How often should backups be taken for an active site?
(A) Once a year
(B) Once a month
(C) Daily or weekly
(D) Never

44. Which backup type saves everything each time?
(A) Incremental backup
(B) Differential backup
(C) Full backup
(D) Manual backup

45. Which security plugin includes malware cleanup services?
(A) Sucuri
(B) WooCommerce
(C) Elementor
(D) Jetpack SEO

46. What does brute-force attack target in WordPress?
(A) Login credentials
(B) Database structure
(C) Media files
(D) Permalinks

47. The WordPress security setting “DISALLOW_FILE_EDIT” is added in:
(A) wp-config.php
(B) index.php
(C) style.css
(D) header.php

48. Cloud storage options for WordPress backups include:
(A) Google Drive
(B) Dropbox
(C) Amazon S3
(D) All of the above

49. Which plugin combines both security and backup features?
(A) Jetpack
(B) WooCommerce
(C) UpdraftPlus
(D) Elementor

50. Why is it important to regularly test backups?
(A) To ensure backups are working and restorable
(B) To improve SEO
(C) To speed up website
(D) To install themes