Level 2 CJIS Security Test Q&A 2022/2023

The CJIS Security Policy outlines the minimum requirements. Each criminal justice agency is encouraged to develop internal security training that defines local and agency specific policies and procedures. - Answer- True What agencies should have written policy describing the actions to be taken in the event of a security incident? - Answer- Every agency accessing CJI Criminal History Record Information (CHRI) is arrest-based data and any derivative information from that record. - Answer- True During social engineering, someone pretends to be ________ in an attempt to gain illicit access to protected data systems. - Answer- an authorized user or other trusted source Who should report any suspected security incident? - Answer- All personnel Hard copies of CJI data should be ________when no longer required. - Answer- physically destroyed Users do not need to log off of the software/system at the end of the shift or when another operator wants to use the software/system. - Answer- False Agencies are not required to develop and publish internal information security policies, including penalties for misuse. - Answer- False Custodial workers that access the terminal area must have a fingerprint background check done and training unless they are escorted in these areas. - Answer- True Training for appropriate personnel would include people who read criminal histories but do not have a NCIC workstation of their own. - Answer- True FBI CJI data may be shared with close friends. - Answer- False FBI CJI data is any data derived from the national CJIS Division systems. - Answer- True You should never email Criminal Justice Information(CJI) unless your agency's email system meets all the requirements outlined in the latest CJIS Security policy. - Answer- True FBI CJI data must be safeguarded to prevent: - Answer- all of the above