CJIS Media Protection & Sanitization

Question 1

According to the CJIS Security Policy, what must occur before disposing of physical media that contains Criminal Justice Information (CJI)?

Accepted Answer

The media must be sanitized using an approved method to render CJI unrecoverable

Answer

CJIS requires that all media containing CJI be sanitized using an approved method—overwriting, degaussing, or physical destruction—before disposal so the data cannot be recovered.

Question 2

Which NIST publication provides the media sanitization guidelines referenced by the CJIS Security Policy?

Accepted Answer

NIST SP 800-88

Answer

NIST SP 800-88, Guidelines for Media Sanitization, is the standard referenced by the CJIS Security Policy for determining appropriate sanitization methods based on media type and sensitivity.

Question 3

Which sanitization method is MOST appropriate for a hard disk drive that contained CJI and will not be reused within the agency?

Accepted Answer

Physical destruction such as shredding or disintegration

Answer

Physical destruction—shredding, disintegrating, or otherwise physically destroying the media—is the most assured sanitization method when a drive will not be reused, guaranteeing CJI cannot be recovered.

Question 4

What is the purpose of degaussing as a media sanitization method under CJIS guidelines?

Accepted Answer

It exposes magnetic media to a strong magnetic field to erase recorded data

Answer

Degaussing exposes magnetic media to a powerful magnetic field that disrupts and erases the magnetic domains where data is stored, making the data unrecoverable.

Question 5

According to the CJIS Security Policy, which of the following is an acceptable sanitization method for paper records containing CJI prior to disposal?

Accepted Answer

Burning the records in an approved incinerator or cross-cut shredding

Answer

CJIS requires paper CJI records to be rendered unreadable before disposal, and burning in an approved incinerator or cross-cut shredding meets this requirement.

(CJIS) Criminal Justice Information Services Certified Practice Test

(CJIS) Criminal Justice Information Services Certified Practice Test

CJIS Media Protection & Sanitization