As a newbie with WordPress I had a heck of a time to find out how to secure the blog. So I struggled along and did the best I could, but I did not feel very secure. So how do you find out the best security setting for WordPress?
Go to the plugins section at WordPress.org and do a search, or use Google or stumble upon an article or podcast that offers blog advice. The last one is what happened to me and I am happy to report that there is a plugin called WP Security Scan that points out the weak areas of your installation and how to fix it. Cool, I like plugins like that.