CJIS Media Protection & Sanitization

Question 1

According to the CJIS Security Policy, what must occur before disposing of physical media that contains Criminal Justice Information (CJI)?

Accepted Answer

The media must be sanitized using an approved method to render CJI unrecoverable

Answer

The media must be returned to the FBI for disposal

Answer

The media must be stored in a secure vault for 10 years before disposal

Answer

The media must be encrypted and then deleted

Question 2

Which NIST publication provides the media sanitization guidelines referenced by the CJIS Security Policy?

Accepted Answer

NIST SP 800-88

Answer

NIST SP 800-53

Answer

NIST SP 800-61

Answer

NIST SP 800-171

Question 3

Which sanitization method is MOST appropriate for a hard disk drive that contained CJI and will not be reused within the agency?

Accepted Answer

Physical destruction such as shredding or disintegration

Answer

Overwriting the drive three times with random data

Answer

Formatting the drive using the operating system format utility

Answer

Deleting all files and emptying the recycle bin

Question 4

What is the purpose of degaussing as a media sanitization method under CJIS guidelines?

Accepted Answer

It exposes magnetic media to a strong magnetic field to erase recorded data

Answer

It encrypts the data on magnetic media using a strong magnetic field

Answer

It physically shreds the magnetic platters inside a hard drive

Answer

It overwrites the media with zeros to clear stored information

Question 5

According to the CJIS Security Policy, which of the following is an acceptable sanitization method for paper records containing CJI prior to disposal?

Accepted Answer

Burning the records in an approved incinerator or cross-cut shredding

Answer

Placing records in a locked dumpster designated for sensitive material

Answer

Marking the records 'Void' and disposing of them in a standard recycling bin

Answer

Storing the records offsite for seven years before normal disposal

Question 6

What must an agency maintain when media containing CJI is sanitized or destroyed?

Accepted Answer

An audit log documenting the sanitization date, method, and personnel responsible

Answer

A signed affidavit from the FBI field office confirming the sanitization

Answer

A copy of the original CJI stored on backup tapes before destruction

Answer

Approval from the state CJIS Systems Officer (CSO) for each item destroyed

Question 7

Under the CJIS Security Policy, how should removable media (such as USB drives) that store CJI be protected when not in use?

Accepted Answer

They must be stored in a locked, access-controlled container or location

Answer

They must be handed over to local law enforcement for overnight storage

Answer

They must be connected to an agency workstation at all times to prevent theft

Answer

They must be encrypted and mailed to a secure offsite facility nightly