LEVEL 2 CJIS SECURITY TEST CERTIFICATION
EVALUATION 2026 QUESTIONS WITH
PRACTICE SOLUTION GRADED A+
◉ Phishing. Answer: Emails designed to deceive users into sharing
data.
◉ Spear Phishing. Answer: Targeted phishing aimed at specific
individuals or groups.
◉ Social Media Exploitation. Answer: Using social media info for
targeted phishing attacks.
◉ Pretexting. Answer: Creating a false story to obtain private
information.
◉ Impersonation. Answer: Pretending to be someone else to gain
access.
◉ Fake IT Support Calls. Answer: Impersonating IT staff to extract
sensitive data.
,◉ Baiting. Answer: Luring users with false promises to compromise
security.
◉ Scareware. Answer: False alarms convincing users to install
harmful software.
◉ Quid Pro Quo. Answer: Exchanging sensitive info for promised
services.
◉ Tailgating. Answer: Unauthorized entry by following an
authorized individual.
◉ Thread-jacking. Answer: Inserting into email conversations to
gain trust.
◉ Shoulder Surfing. Answer: Observing someone's screen to steal
information.
◉ Vulnerability. Answer: Weaknesses in security that can be
exploited.
◉ Examples of Vulnerabilities. Answer: Include physical, natural,
hardware, and software weaknesses.
, ◉ Minimizing Vulnerability. Answer: Steps to protect against
malware and unauthorized access.
◉ Antivirus Software. Answer: Essential for protecting against
malicious code.
◉ Monitoring User Activity. Answer: Ensures compliance and
prevents improper use.
◉ Reporting Unusual Activity. Answer: Encouraged to identify
potential insider threats.
◉ Security Alerts. Answer: Notifications about potential security
threats.
◉ CJIS Systems Agency (CSA). Answer: Agency managing IT security
programs in jurisdictions.
◉ CJIS Systems Officer (CSO). Answer: Administers CJIS network
within the CSA.
◉ Information Security Officer (ISO). Answer: Liaison to FBI CJIS
Division for security matters.
EVALUATION 2026 QUESTIONS WITH
PRACTICE SOLUTION GRADED A+
◉ Phishing. Answer: Emails designed to deceive users into sharing
data.
◉ Spear Phishing. Answer: Targeted phishing aimed at specific
individuals or groups.
◉ Social Media Exploitation. Answer: Using social media info for
targeted phishing attacks.
◉ Pretexting. Answer: Creating a false story to obtain private
information.
◉ Impersonation. Answer: Pretending to be someone else to gain
access.
◉ Fake IT Support Calls. Answer: Impersonating IT staff to extract
sensitive data.
,◉ Baiting. Answer: Luring users with false promises to compromise
security.
◉ Scareware. Answer: False alarms convincing users to install
harmful software.
◉ Quid Pro Quo. Answer: Exchanging sensitive info for promised
services.
◉ Tailgating. Answer: Unauthorized entry by following an
authorized individual.
◉ Thread-jacking. Answer: Inserting into email conversations to
gain trust.
◉ Shoulder Surfing. Answer: Observing someone's screen to steal
information.
◉ Vulnerability. Answer: Weaknesses in security that can be
exploited.
◉ Examples of Vulnerabilities. Answer: Include physical, natural,
hardware, and software weaknesses.
, ◉ Minimizing Vulnerability. Answer: Steps to protect against
malware and unauthorized access.
◉ Antivirus Software. Answer: Essential for protecting against
malicious code.
◉ Monitoring User Activity. Answer: Ensures compliance and
prevents improper use.
◉ Reporting Unusual Activity. Answer: Encouraged to identify
potential insider threats.
◉ Security Alerts. Answer: Notifications about potential security
threats.
◉ CJIS Systems Agency (CSA). Answer: Agency managing IT security
programs in jurisdictions.
◉ CJIS Systems Officer (CSO). Answer: Administers CJIS network
within the CSA.
◉ Information Security Officer (ISO). Answer: Liaison to FBI CJIS
Division for security matters.
