CJIS SECURITY TEST QUESTIONS AND
CORRECT ANSWERS
◉ What agencies should have written policy describing the actions
to be taken in the event of a security incident?
Answer: Every agency accessing CJI
◉ Criminal History Record Information (CHRI) is arrest-based data
and any derivative information from that record.
Answer: True
◉ During social engineering, someone pretends to be ________ in an
attempt to gain illicit access to protected data systems.
Answer: an authorized user or other trusted source
◉ Who should report any suspected security incident?
Answer: All personnel
◉ Hard copies of CJI data should be ________when no longer required.
Answer: physically destroyed
, ◉ Users do not need to log off of the software/system at the end of
the shift or when another operator wants to use the
software/system.
Answer: False
◉ Agencies are not required to develop and publish internal
information security policies, including penalties for misuse.
Answer: False
◉ Custodial workers that access the terminal area must have a
fingerprint background check done and training unless they are
escorted in these areas.
Answer: True
◉ Training for appropriate personnel would include people who
read criminal histories but do not have a NCIC workstation of their
own.
Answer: True
◉ FBI CJI data may be shared with close friends.
Answer: False
◉ FBI CJI data is any data derived from the national CJIS Division
systems.
CORRECT ANSWERS
◉ What agencies should have written policy describing the actions
to be taken in the event of a security incident?
Answer: Every agency accessing CJI
◉ Criminal History Record Information (CHRI) is arrest-based data
and any derivative information from that record.
Answer: True
◉ During social engineering, someone pretends to be ________ in an
attempt to gain illicit access to protected data systems.
Answer: an authorized user or other trusted source
◉ Who should report any suspected security incident?
Answer: All personnel
◉ Hard copies of CJI data should be ________when no longer required.
Answer: physically destroyed
, ◉ Users do not need to log off of the software/system at the end of
the shift or when another operator wants to use the
software/system.
Answer: False
◉ Agencies are not required to develop and publish internal
information security policies, including penalties for misuse.
Answer: False
◉ Custodial workers that access the terminal area must have a
fingerprint background check done and training unless they are
escorted in these areas.
Answer: True
◉ Training for appropriate personnel would include people who
read criminal histories but do not have a NCIC workstation of their
own.
Answer: True
◉ FBI CJI data may be shared with close friends.
Answer: False
◉ FBI CJI data is any data derived from the national CJIS Division
systems.