CJIS Media Protection & Sanitization 1 â Questions and Answers
Question 1: According to the CJIS Security Policy, what must occur before disposing of physical media that contains Criminal Justice Information (CJI)?
- The media must be sanitized using an approved method to render CJI unrecoverable (Correct answer)
- The media must be returned to the FBI for disposal
- The media must be stored in a secure vault for 10 years before disposal
- The media must be encrypted and then deleted
Correct answer: The media must be sanitized using an approved method to render CJI unrecoverable
CJIS requires that all media containing CJI be sanitized using an approved methodâoverwriting, degaussing, or physical destructionâbefore disposal so the data cannot be recovered.
Question 2: Which NIST publication provides the media sanitization guidelines referenced by the CJIS Security Policy?
- NIST SP 800-53
- NIST SP 800-88 (Correct answer)
- NIST SP 800-61
- NIST SP 800-171
Correct answer: NIST SP 800-88
NIST SP 800-88, Guidelines for Media Sanitization, is the standard referenced by the CJIS Security Policy for determining appropriate sanitization methods based on media type and sensitivity.
Question 3: Which sanitization method is MOST appropriate for a hard disk drive that contained CJI and will not be reused within the agency?
- Overwriting the drive three times with random data
- Formatting the drive using the operating system format utility
- Physical destruction such as shredding or disintegration (Correct answer)
- Deleting all files and emptying the recycle bin
Correct answer: Physical destruction such as shredding or disintegration
Physical destructionâshredding, disintegrating, or otherwise physically destroying the mediaâis the most assured sanitization method when a drive will not be reused, guaranteeing CJI cannot be recovered.
Question 4: What is the purpose of degaussing as a media sanitization method under CJIS guidelines?
- It encrypts the data on magnetic media using a strong magnetic field
- It exposes magnetic media to a strong magnetic field to erase recorded data (Correct answer)
- It physically shreds the magnetic platters inside a hard drive
- It overwrites the media with zeros to clear stored information
Correct answer: It exposes magnetic media to a strong magnetic field to erase recorded data
Degaussing exposes magnetic media to a powerful magnetic field that disrupts and erases the magnetic domains where data is stored, making the data unrecoverable.
Question 5: According to the CJIS Security Policy, which of the following is an acceptable sanitization method for paper records containing CJI prior to disposal?
- Placing records in a locked dumpster designated for sensitive material
- Burning the records in an approved incinerator or cross-cut shredding (Correct answer)
- Marking the records 'Void' and disposing of them in a standard recycling bin
- Storing the records offsite for seven years before normal disposal
Correct answer: Burning the records in an approved incinerator or cross-cut shredding
CJIS requires paper CJI records to be rendered unreadable before disposal, and burning in an approved incinerator or cross-cut shredding meets this requirement.
Question 6: What must an agency maintain when media containing CJI is sanitized or destroyed?
- An audit log documenting the sanitization date, method, and personnel responsible (Correct answer)
- A signed affidavit from the FBI field office confirming the sanitization
- A copy of the original CJI stored on backup tapes before destruction
- Approval from the state CJIS Systems Officer (CSO) for each item destroyed
Correct answer: An audit log documenting the sanitization date, method, and personnel responsible
CJIS requires agencies to maintain accountability recordsâlogs of what was sanitized, when, how, and by whomâto provide an auditable trail of media disposal activities.
Question 7: Under the CJIS Security Policy, how should removable media (such as USB drives) that store CJI be protected when not in use?
- They must be stored in a locked, access-controlled container or location (Correct answer)
- They must be handed over to local law enforcement for overnight storage
- They must be connected to an agency workstation at all times to prevent theft
- They must be encrypted and mailed to a secure offsite facility nightly
Correct answer: They must be stored in a locked, access-controlled container or location
CJIS requires removable media containing CJI to be stored in a physically secure, access-controlled location when not in active use to prevent unauthorized access or theft.
CJIS Media Protection & Sanitization 1
According to the CJIS Security Policy, what must occur before disposing of physical media that contains Criminal Justice Information (CJI)?