CJIS Disaster Recovery & Business Continuity 3 ā Questions and Answers
Question 1: Which document formally authorizes resumption of CJIS operations at an alternate recovery site?
- Continuity of Operations Plan (COOP) (Correct answer)
- System Security Plan (SSP)
- Data Retention Policy
- Acceptable Use Policy
Correct answer: Continuity of Operations Plan (COOP)
The Continuity of Operations Plan (COOP) documents procedures and authorizations for maintaining essential functions at alternate sites.
Question 2: A county sheriff's office loses CJIS connectivity during a flood. Which temporary measure is permissible under CJIS policy?
- Using a personal smartphone to access NCIC
- Coordinating manual verification through the State CSO via phone (Correct answer)
- Sharing credentials with neighboring agencies to maintain access
- Disabling authentication temporarily to speed up queries
Correct answer: Coordinating manual verification through the State CSO via phone
Agencies may coordinate manual verifications through the Control Terminal Agency or State CSO when automated access is unavailable.
Question 3: What Recovery Point Objective (RPO) value means an agency can tolerate losing up to 24 hours of CJIS transaction data?
- RPO = 0 hours
- RPO = 24 hours (Correct answer)
- RPO = 48 hours
- RPO = 1 week
Correct answer: RPO = 24 hours
An RPO of 24 hours means backups must capture data at least once daily so no more than one day of transactions is lost.
Question 4: Under CJIS Security Policy section 5.12, contingency plans must address which of the following scenarios?
- Budget overruns and staffing shortages only
- System disruptions, disasters, and emergencies affecting CJI (Correct answer)
- Marketing continuity for public-facing law enforcement portals
- Only natural disasters, not cyberattacks
Correct answer: System disruptions, disasters, and emergencies affecting CJI
CJIS contingency planning must address all eventsānatural disasters, cyberattacks, and other emergenciesāthat disrupt access to CJI.
Question 5: Which role is responsible for approving the agency's disaster recovery plan under CJIS governance?
- The Terminal Agency Coordinator (TAC)
- The Network Administrator
- The Agency Head or their designated official (Correct answer)
- The CJIS Systems Officer (CSO) at the FBI
Correct answer: The Agency Head or their designated official
The Agency Head or their formally designated official holds accountability for approving and maintaining the disaster recovery plan.
Question 6: What is the purpose of a 'warm site' compared to a cold site in CJIS disaster recovery?
- A warm site has hardware pre-installed but requires software configuration; a cold site has neither (Correct answer)
- A warm site is geographically closer; a cold site is farther away
- A warm site is cheaper than a cold site to maintain
- A warm site uses wireless connectivity; a cold site uses wired connections
Correct answer: A warm site has hardware pre-installed but requires software configuration; a cold site has neither
A warm site has hardware and some configuration in place, reducing recovery time compared to a cold site where everything must be set up from scratch.
Question 7: During a tabletop exercise for CJIS disaster recovery, what is the primary goal?
- To physically test failover by shutting down production systems
- To walk participants through scenarios to identify plan gaps without disrupting operations (Correct answer)
- To train new employees on daily CJIS procedures
- To satisfy annual cybersecurity certification requirements only
Correct answer: To walk participants through scenarios to identify plan gaps without disrupting operations
Tabletop exercises use discussion-based scenarios to reveal plan weaknesses and test decision-making without real-world disruption.
CJIS Disaster Recovery & Business Continuity 3
Which document formally authorizes resumption of CJIS operations at an alternate recovery site?