The security principle of _______ is where individuals are granted only the most restrictive set
of access privileges required to perform their official duties. - CORRECT ANSWER-Least privilege
All training records must be kept current and be maintained for a minimum of three years. -
CORRECT ANSWER-True
After the initial training, how often must Security and Privacy Training be completed? -
CORRECT ANSWER-Every year
An example of a possible threat to security and privacy is a user accidentally erasing a critical file
while "playing" on the computer. - CORRECT ANSWER-True
Any incidents or unusual activity should be reported to your agency contact, LASO, or
Information Security Officer immediately. - CORRECT ANSWER-True
The FBI authorized originating agency identifier (ORI) must be used in each transaction on CJIS
systems. - CORRECT ANSWER-True
Authorized criminal justice purposes for the use of CJI include: - CORRECT ANSWER-All of these
are correct
A security incident is a violation of the CJIS Security Policy that threatens the confidentiality,
integrity, or availability of CJI. - CORRECT ANSWER-True
A commonly used type of social engineering is: - CORRECT ANSWER-All of these are correct
Encryption is: - CORRECT ANSWER-The process of converting information or data into a code to
prevent unauthorized access
of access privileges required to perform their official duties. - CORRECT ANSWER-Least privilege
All training records must be kept current and be maintained for a minimum of three years. -
CORRECT ANSWER-True
After the initial training, how often must Security and Privacy Training be completed? -
CORRECT ANSWER-Every year
An example of a possible threat to security and privacy is a user accidentally erasing a critical file
while "playing" on the computer. - CORRECT ANSWER-True
Any incidents or unusual activity should be reported to your agency contact, LASO, or
Information Security Officer immediately. - CORRECT ANSWER-True
The FBI authorized originating agency identifier (ORI) must be used in each transaction on CJIS
systems. - CORRECT ANSWER-True
Authorized criminal justice purposes for the use of CJI include: - CORRECT ANSWER-All of these
are correct
A security incident is a violation of the CJIS Security Policy that threatens the confidentiality,
integrity, or availability of CJI. - CORRECT ANSWER-True
A commonly used type of social engineering is: - CORRECT ANSWER-All of these are correct
Encryption is: - CORRECT ANSWER-The process of converting information or data into a code to
prevent unauthorized access
