CJIS SECURITY TEST QUESTIONS AND
SOLUTIONS
◉ The security principle of _______ is where individuals are granted
only the most restrictive set of access privileges required to perform
their official duties.
Answer: Least privilege
◉ All training records must be kept current and be maintained for a
minimum of three years.
Answer: True
◉ After the initial training, how often must Security and Privacy
Training be completed?
Answer: Every year
◉ An example of a possible threat to security and privacy is a user
accidentally erasing a critical file while "playing" on the computer.
Answer: True
◉ Any incidents or unusual activity should be reported to your
agency contact, LASO, or Information Security Officer immediately.
, Answer: True
◉ The FBI authorized originating agency identifier (ORI) must be
used in each transaction on CJIS systems.
Answer: True
◉ Authorized criminal justice purposes for the use of CJI include:
Answer: All of these are correct
◉ A security incident is a violation of the CJIS Security Policy that
threatens the confidentiality, integrity, or availability of CJI.
Answer: True
◉ A commonly used type of social engineering is:
Answer: All of these are correct
◉ Encryption is:
Answer: The process of converting information or data into a code to
prevent unauthorized access
◉ Access to and use of CJI and CHRI is for:
Answer: Criminal justice purposes and authorized noncriminal
justice functions only
SOLUTIONS
◉ The security principle of _______ is where individuals are granted
only the most restrictive set of access privileges required to perform
their official duties.
Answer: Least privilege
◉ All training records must be kept current and be maintained for a
minimum of three years.
Answer: True
◉ After the initial training, how often must Security and Privacy
Training be completed?
Answer: Every year
◉ An example of a possible threat to security and privacy is a user
accidentally erasing a critical file while "playing" on the computer.
Answer: True
◉ Any incidents or unusual activity should be reported to your
agency contact, LASO, or Information Security Officer immediately.
, Answer: True
◉ The FBI authorized originating agency identifier (ORI) must be
used in each transaction on CJIS systems.
Answer: True
◉ Authorized criminal justice purposes for the use of CJI include:
Answer: All of these are correct
◉ A security incident is a violation of the CJIS Security Policy that
threatens the confidentiality, integrity, or availability of CJI.
Answer: True
◉ A commonly used type of social engineering is:
Answer: All of these are correct
◉ Encryption is:
Answer: The process of converting information or data into a code to
prevent unauthorized access
◉ Access to and use of CJI and CHRI is for:
Answer: Criminal justice purposes and authorized noncriminal
justice functions only