LEVEL 2 CJIS SECURITY TEST
EXAM ALL QUESTIONS WITH
CORRECT ANSWERS
Training for appropriate personnel would include people who read criminal histories but do not
have a NCIC workstation of their own. - answer- True
The CJIS Security Policy outlines the minimum requirements. Each criminal justice agency is
encouraged to develop internal security training that defines local and agency specific policies
and procedures. - answer- True
FBI CJI data is sensitive information and security shall be afforded to prevent any unauthorized
access, use or dissemination of the data. - answer- True
FBI CJI data must be safeguarded to prevent: - answer- All of the Above
Unauthorized requests, receipts, release, interception, dissemination or discussion of FBI CJI
data could result in criminal prosecution and/or termination of employment. - answer-
True
A security incident shall be reported to the CJIS Systems Agency's (CSA's) Information Security
Officer (ISO) and include the following information: date of the incident, location(s) of incident,
systems affected, method of detection, nature of the incident, description of the incident,
actions taken/resolution, date and contact information for the agency. - answer- True
, What agencies should have written policy describing the actions to be taken in the event of a
security incident? - answer- Every agency accessing CJI
Criminal History Record Information (CHRI) is arrest-based data and any derivative information
from that record. - answer- True
During social engineering, someone pretends to be ________ in an attempt to gain illicit access
to protected data systems. - answer- an authorized user or other trusted source
A physically secure location is a facility, a criminal justice conveyance, or an area, a room, or a
group of rooms within a facility with both the physical and personnel security controls sufficient
to protect CJI and associated information systems. - answer- True
Sometimes you may only see indicators of a security incident. - answer- True
All persons who have access to CJI are required to have security training within _____ months of
assignment. - answer- 6
Training for appropriate personnel would include vendors who develop software for NCIC
access. - answer- True
Interstate Identification Index (III), known as 'Triple I', is a 'pointer' system for the interstate
exchange of criminal history record information. - answer- True
All persons who have direct access to FBI CJI data and all appropriate Information Technology
(IT) personnel (including vendors) shall receive security awareness training on a biennial basis. -
answer- True
EXAM ALL QUESTIONS WITH
CORRECT ANSWERS
Training for appropriate personnel would include people who read criminal histories but do not
have a NCIC workstation of their own. - answer- True
The CJIS Security Policy outlines the minimum requirements. Each criminal justice agency is
encouraged to develop internal security training that defines local and agency specific policies
and procedures. - answer- True
FBI CJI data is sensitive information and security shall be afforded to prevent any unauthorized
access, use or dissemination of the data. - answer- True
FBI CJI data must be safeguarded to prevent: - answer- All of the Above
Unauthorized requests, receipts, release, interception, dissemination or discussion of FBI CJI
data could result in criminal prosecution and/or termination of employment. - answer-
True
A security incident shall be reported to the CJIS Systems Agency's (CSA's) Information Security
Officer (ISO) and include the following information: date of the incident, location(s) of incident,
systems affected, method of detection, nature of the incident, description of the incident,
actions taken/resolution, date and contact information for the agency. - answer- True
, What agencies should have written policy describing the actions to be taken in the event of a
security incident? - answer- Every agency accessing CJI
Criminal History Record Information (CHRI) is arrest-based data and any derivative information
from that record. - answer- True
During social engineering, someone pretends to be ________ in an attempt to gain illicit access
to protected data systems. - answer- an authorized user or other trusted source
A physically secure location is a facility, a criminal justice conveyance, or an area, a room, or a
group of rooms within a facility with both the physical and personnel security controls sufficient
to protect CJI and associated information systems. - answer- True
Sometimes you may only see indicators of a security incident. - answer- True
All persons who have access to CJI are required to have security training within _____ months of
assignment. - answer- 6
Training for appropriate personnel would include vendors who develop software for NCIC
access. - answer- True
Interstate Identification Index (III), known as 'Triple I', is a 'pointer' system for the interstate
exchange of criminal history record information. - answer- True
All persons who have direct access to FBI CJI data and all appropriate Information Technology
(IT) personnel (including vendors) shall receive security awareness training on a biennial basis. -
answer- True
