Level 2 CJIS Security Test (answered)

The CJIS Security Policy outlines the minimum requirements. Each criminal justice agency is encouraged to develop internal security training that defines local and agency specific policies and procedures. correct answers True What agencies should have written policy describing the actions to be taken in the event of a security incident? correct answers Every agency accessing CJI Criminal History Record Information (CHRI) is arrest-based data and any derivative information from that record. correct answers True During social engineering, someone pretends to be ________ in an attempt to gain illicit access to protected data systems. correct answers an authorized user or other trusted source Who should report any suspected security incident? correct answers All personnel Hard copies of CJI data should be ________when no longer required. correct answers physically destroyed Users do not need to log off of the software/system at the end of the shift or when another operator wants to use the software/system. correct answers False Agencies are not required to develop and publish internal information security policies, including penalties for misuse. correct answers False Custodial workers that access the terminal area must have a fingerprint background check done and training unless they are escorted in these areas. correct answers True Training for appropriate personnel would include people who read criminal histories but do not have a NCIC workstation of their own. correct answers True FBI CJI data may be shared with close friends. correct answers False FBI CJI data is any data derived from the national CJIS Division systems. correct answers True You should never email Criminal Justice Information(CJI) unless your agency's email system meets all the requirements outlined in the latest CJIS Security policy. correct answers True FBI CJI data must be safeguarded to prevent: correct answers all of the above A security incident is a violation or attempted violation of the FBI CJIS Security Policy or other security policy that would threaten the confidentiality, integrity or availability of FBI or State CJI data. correct answers True