CJIS Disaster Recovery & Business Continuity 2

Question 1

Under CJIS Security Policy, what is the minimum frequency for testing disaster recovery plans?

Accepted Answer

Annually

Answer

CJIS Security Policy requires that disaster recovery plans be tested at least annually to verify effectiveness.

Question 2

Which CJIS concept describes the maximum acceptable length of time that a system can be offline following a failure?

Accepted Answer

Recovery Time Objective (RTO)

Answer

Recovery Time Objective (RTO) defines the maximum allowable downtime before services must be restored.

Question 3

A law enforcement agency's CJIS systems experience a ransomware attack. What is the FIRST action personnel should take?

Accepted Answer

Isolate affected systems from the network

Answer

Isolating affected systems prevents ransomware from spreading to other network segments and preserves evidence.

Question 4

What does a Business Impact Analysis (BIA) primarily identify in the context of CJIS-covered systems?

Accepted Answer

Critical functions and the effect of their disruption

Answer

A BIA identifies mission-critical functions and quantifies the impact of their disruption to prioritize recovery efforts.

Question 5

Which backup strategy requires the longest restoration time but uses the least storage space for daily backups?

Accepted Answer

Incremental backup

Answer

Incremental backups capture only changes since the last backup, saving storage but requiring multiple sets to restore.

(CJIS) Criminal Justice Information Services Certified Practice Test