CJIS Security Test Overview

CJIS Security Test 1. FBI CJI data is sensitive information and security shall True be afforded to prevent any unauthorized access, use or dissemination of the data. 2. FBI CJI data must be safeguarded to prevent: All of the Above 3. Unauthorized requests, receipts, release, interception, dissemination or discussion of FBI CJI data could result in criminal prosecution and/or termination of employment. True 4. A security incident shall be reported to the CJIS Sys- True tems Agency's (CSA's) Information Security Officer (ISO) and include the following information: date of the incident, location(s) of incident, systems affected, method of detection, nature of the incident, description of the incident, actions taken/resolution, date and contact information for the agency. 5. Training for appropriate personnel would include peo- True ple who read criminal histories but do not have a NCIC workstation of their own. 6. A security incident is a violation or attempted viola- True tion of the FBI CJIS Security Policy or other security policy that would threaten the confidentiality, integrity or availability of FBI or State CJI data. 7. FBI CJI data is any data derived from the national CJIS True Division Systems. 8. Electronic media includes, but is not limited to: All of the Above 9. According to many security experts, which group con- The agency's own stitutes the biggest threat: personal 10. Users do not need to log off of the software/system at False the end of the shift or when another operator wants to use the software/system. 1/3 11. Training for appropriate personnel would include ven- True dors who develop software for NCIC access. 12. You should never email Criminal Justice Information True (CJI) unless your agency's email system meets all the requirements outlined in latest CJIS Security policy. 13. __________ is sensitive data and unauthorized use CHRI could result in criminal prosecution or termination of employment. 14. Sometimes you may only see indicators of a security True incident. 15. Custodial workers that access the terminal area must True have a fingerprint background check done and training unless they are escorted in these areas. 16. Criminal History Record Information (CHRI) includes: All of the above 17. All persons who have access to CJI are required to have security training within ___ months of assignment. 6 18. The CJIS Security Policy outlines the minimum reTrue quirements. Each criminal justice agency is encouraged to develop internal security training that defines local and agency specific policies and procedures. 19. Information obtained from the III is not considered CHRI. False 20. Social Engineering is an attack based on deceiving users or administrators at the target site. True 21. The state CJIS Systems Agency (CSA) is responsible True for compliance with the FBI CJIS security policy. 22. Criminal justice purposes (also known as the admin- True istration of criminal justice) include: detection, appre2/3 hension, detention, pretrial release, post-trial release, prosecution, adjudication, correctional supervision, or rehabilitation of accused persons or criminal offenders. 23. Each agency accessing FBI CJI data should have a True written policy describing the actions to be taken in the event of a security incident. 24. Training records must be kept current by the State, Federal or Local Agency Officer. True 25. Access to and use of FBI CJI is only for: Criminal justice or authorized civil purposes only. 3/3