Criminal Justice Information Services (CJIS) Recertification Practice Test

These questions are part of the practice quiz. Start practicing

• For how long must all training records be maintained?
• What does multi-factor authentication require?
• Are security incidents typically subtle or obvious?
• What kind of data is stored on the National Instant Criminal Background Check System (NICS)?
• What might be a consequence of sharing sensitive CJIS data improperly?
• What defines a security incident in terms of CJIS Security Policy?
• What is the consequence for individuals who violate the law against obtaining criminal history records improperly?
• What is the primary goal of CJIS security policies?
• What kind of documentation is vital when handling CJIS data?
• What should be done to an employee’s access when they change roles or leave an agency?
• Can Driver's License photos be obtained through the Criminal Justice Information system?
• Why should individuals have access to their personally identifiable information (PII)?
• Access to and use of Criminal Justice Information (CJI) is limited to what purposes?
• How does CJIS suggest agencies manage mobile device security?
• Is remote access to CJIS systems allowed?
• Which of the following is a method to secure sensitive information?
• What should an information system display before allowing access?
• What is an example of a threat to security and privacy?
• True or False: Records that haven't completed validation will be electronically purged.
• What is encryption?
• What is the primary standard for encryption required by CJIS?
• What does the term "critical incident" refer to in the CJIS context?
• What should be prominently posted to ensure physical security?
• What is a key benefit of adhering to the CJIS Security Framework?
• What is required for personnel with access to CJI concerning background checks?
• Which of the following is NOT a consequence of unauthorized access to CJI?
• What is the maximum allowed idle time before CJIS sessions must require reauthentication?
• What may a person be guilty of if they willfully request or obtain criminal history records under false pretenses?
• Upon termination of personnel, can the agency allow user access to local agency systems for up to 90 days?
• What is one fundamental reason for regular CJIS recertification?
• Do agencies need to have a defined incident response plan under CJIS?
• What is the role of the CJIS System Manager?
• Who is responsible for contacting the TAC to schedule and conduct routine audits?
• How often should individual background re-investigations be conducted for personnel with access to CJI?
• Who is primarily responsible for enforcing CJIS compliance within an agency?
• In the context of CJIS, what does "least privilege" refer to?
• What should be done about a user’s access if their behavior raises security concerns?
• What can unauthorized requests or discussions of CJI result in?
• Why is role-based access control important for CJIS compliance?
• What identifier must be used in each transaction on CJIS systems?
• True or False: Some users like chiefs or sheriffs must be uniquely identified and authenticated to handle CJI.
• What is the importance of the CJIS Security Framework?
• What are potential consequences of non-compliance with CJIS security policy?
• According to the law, is it permissible to request criminal history records under false pretenses?
• What is the main purpose of training all users in identifying and reporting suspicious activities?
• What type of training is required for CJIS users?
• How long must all training records be maintained?
• Which agency is responsible for managing CJIS?
• What principle is crucial for determining access to sensitive CJIS data?
• What should be done if a user becomes non-compliant with CJIS training requirements?
• What is the legal classification of requesting criminal records under false pretenses?
• Which of the following represents an example of information managed by CJIS?
• What does Personally Identifiable Information (PII) refer to?
• Which of the following statements is true regarding the use of Criminal Justice Information?
• What determines access to sensitive CJIS information?
• True or False: All NCIC records have the same level of restriction.
• What is the status of the statement regarding the need for training records to be kept up to date?
• What does "System Use Notification" inform users about?
• What is the primary purpose of CJIS?
• How should agencies respond to a significant data breach involving CJIS data?
• Which of the following is an authorized purpose for using Criminal Justice Information (CJI)?
• Which acts as a protective measure against unauthorized data access?
• How often do agencies need to re-certify for CJIS compliance?
• How often is Security and Privacy Training required to be completed after initial training?
• Why is the principle of least privilege important in CJIS data access?
• Must Security and Privacy Training be completed prior to an employee accessing the system?
• Which of the following roles is primarily served by CJIS?
• Is it acceptable to share Criminal Justice Information (CJI) with close friends or relatives?
• Which of the following statements about security incidents is true?
• What must be included in the incident response plan for CJIS breaches?
• What does "multi-factor authentication" entail in the CJIS context?
• Is it true that state warrant information can be entered using the SW screen?
• What does the CJIS Policy state about password management?
• What is one outcome of applying the principle of 'least privilege'?
• Which type of data is prohibited from being shared outside of authorized users?
• What is the term for the unauthorized use of someone's identity to commit fraud?
• Should TACs have knowledge of computers and gaming software?
• What is the security principle that restricts access privileges to what is essential for performing duties?
• How is sensitive information handling emphasized in CJIS training?
• Which of the following is critical for CJIS data access?
• What type of information is included in Criminal Justice Information?
• How often must system performance checks be conducted for CJIS systems?
• According to the CJIS Security Policy, is CHRI a subset of CJI?
• Do agencies need an electronic or hard copy warrant to enter a record into the Wanted Person File?
• Which files are part of NCJIS?
• Who can request Criminal Justice Information without penalty?
• Which is NOT a type of authentication factor?
• Malicious code is also known as _______ and is intended to compromise data integrity.
• What type of audits does CJIS require for monitoring compliance?
• To whom should incidents or unusual activity be reported immediately?
• When must Security and Privacy Literacy Training be taken?
• What is one of the key functions of the CJIS Security Policy?
• Can CJIS data be accessed from personal devices?
• How does the law classify the act of knowingly accessing records under false pretenses?
• If someone disseminates Criminal Justice Information without authorization, what type of offense are they committing?
• Under what condition is dissemination of Criminal Justice Information allowed?
• If unsure of a TranCode abbreviation, what can you do?
• Is a server connected to a power source without a surge protector a natural security vulnerability?
• In the event of a data breach, what is the primary action that must be taken?
• Is SCOPE a Clark County Database?
• What access control method is recommended by CJIS?
• What is the consequence of failing to report unusual activity?
• What type of information is typically managed by CJIS?
• What is the required action if a CJIS user suspects a security breach?
• What is the definition of unauthorized dissemination in relation to Criminal History Record Information?
• Which of the following is NOT considered Criminal Justice Information?
• Which of the following is considered a breach of CJIS regulations?
• What does the Validation Summary Report provide?
• Which type of physical security measures should be implemented for CJIS data?
• Under what conditions may remote access be permitted for privileged functions?
• Which of the following best describes a vital part of data handling protocols for CJIS?
• Is it allowed to store or transmit CJIS data without encryption?
• During the Detection and Analysis phase of Incident Handling, what must be determined?
• Is NCIC considered a Federal database?
• Which of the following is true regarding training records?
• According to CJIS policies, what is a vital component of personnel training?
• How is CJIS compliance verified within organizations?
• Which of the following is NOT part of the NCIC Person Files?
• Why is employee training critical in CJIS compliance?
• What type of updates are required for CJIS policies?
• Is the FBI authorized originating agency identifier (ORI) required on each CJIS systems transaction?
• Does each state have its own CJIS Systems Agency responsible for NCIC matters?
• Who is responsible for ensuring that access to sensitive information is restricted?
• Can SCOPE II and WVS be accessed through JLink?
• What is the correct positioning for information system devices regarding public visibility?
• What is essential for ensuring data accuracy for individuals’ personally identifiable information (PII)?
• What are two common types of threat vectors to CJIS information?
• Is there a User Guide for Nlets accessible from JLink?
• What does dissemination refer to in the context of Criminal Justice Information?
• What documentation is required for any incidents involving CJIS data?
• What is one of the key security measures recommended by CJIS for mobile devices?
• What is the primary reason for restricting CJI access?
• What type of training frequency is mandated for CJIS compliance?
• CJI can include which types of data?
• What does the Supervised Release File contain?
• How are security incidents categorized under CJIS guidelines?
• Which of the following is classified as a restricted file that contains CHRI?
• Is it legal for individuals to check on the accuracy of their own PII?
• What does CJIS stand for?
• What type of training is required for employees with access to CJIS data?
• What action should be taken if a data breach occurs involving CJIS data?
• What kind of training should personnel handling CJIS data receive?
• Access to controlled areas containing systems accessing CJI should be limited to?
• What is a recommended strategy for securing data on mobile devices?
• What is phishing?
• Access to controlled areas containing CJI-related systems should be:
• Which responsibility should users follow regarding computer monitor positioning?
• What impact does a security breach have according to CJIS standards?
• What are the requirements for physical protection against unauthorized access to CJIS data?
• What information is essential to include in a security incident report?
• What do blue fields indicate in the transaction screen?
• Which practice is NOT part of the guidelines for handling CJIS data?
• What action must be taken if critical electronic media cannot be destroyed?
• Which of the following is a required security measure for areas designated for CJI access or storage?
• What principle divides roles and responsibilities related to administrative duties?
• What is a key element in the incident response process according to CJIS guidelines?
• What does CJI stand for in the context of criminal records?
• The security principle of _______ restricts access privileges required for official duties.
• What is a critical security measure when handling CJIS data?
• Which of the following actions would constitute a violation under the law regarding criminal history records?
• What are the guidelines for sharing CJIS data with other agencies?
• What must users of CJIS systems undergo as part of the security policy?
• An automatic device lock is not required if:
• How long must records of access to CJIS information be retained?
• What principle ensures that CJI is only accessed by qualified individuals?
• What is an expected outcome following a proven security incidents?
• What does "data classification" refer to in the CJIS context?
• Can CJIS data be accessed over public Wi-Fi?
• What constitutes a violation of CJIS protocol?
• Which of the following is a key provision of CJIS security policy related to personnel?
• Why is the CJIS Security Policy important?
• Who is responsible for the overall compliance with CJIS standards within an agency?
• How many types of Command Buttons are there?
• Who is most responsible for ensuring compliance with CJIS policies?
• According to NRS 179A.900, what is the consequence for willfully falsifying any record of criminal history?
• What is the name of the database that contains a national repository of criminal records?
• What is necessary to maintain accountability in handling CJIS data?
• What is the primary function of the Transaction Screen?
• If electronic media cannot be destroyed, what should be done to prevent unauthorized access to its data?
• What is a commonly used type of social engineering?
• If an operator's unauthorized inquiry includes criminal history record information, may they be subject to criminal charges pursuant to NRS 179A.900?
• True or False: Private contractors involved in criminal justice must meet the same training requirements as government agencies.
• What is a benefit of the National Crime Information Center (NCIC)?
• Is XN used to clear an NCIC warrant?
• Under what conditions can CJIS data be shared with contractors or vendors?
• What are the responsibilities of the CJIS Systems Officer?