CJIS Mobile Device & Cloud Security 2

Question 1

Under CJIS Security Policy, what is required before a mobile device can access CJI via a cellular network?

Accepted Answer

The device must use a VPN or equivalent encryption tunnel

Answer

CJIS Policy requires that CJI transmitted over cellular networks be protected by an advanced authentication and encryption mechanism equivalent to a VPN tunnel.

Question 2

Which CJIS requirement applies specifically to tablets and smartphones used to access CJI?

Accepted Answer

They must display a CJIS warning banner upon login

Answer

CJIS Policy mandates that any system accessing CJI display an approved warning banner notifying users of monitoring and authorized-use restrictions.

Question 3

A law enforcement officer's personal smartphone is used to access agency email containing CJI. Which CJIS control is most directly triggered?

Accepted Answer

Mobile Device Management (MDM) enrollment and policy enforcement

Answer

CJIS Policy requires that personally owned devices accessing CJI be enrolled in an MDM solution that enforces agency security policies.

Question 4

What does CJIS Policy require regarding the remote wipe capability of mobile devices that store or access CJI?

Accepted Answer

Remote wipe capability must be enabled and enforceable by the agency

Answer

CJIS Policy requires agencies to have the ability to remotely wipe mobile devices that access CJI to protect against unauthorized disclosure after loss or theft.

Question 5

Under CJIS cloud computing requirements, which party bears responsibility for ensuring the cloud service meets CJIS Security Policy standards?

Accepted Answer

The criminal justice agency using the cloud service

Answer

The criminal justice agency remains responsible for ensuring any cloud provider they contract with meets CJIS Security Policy requirements, typically via an executed CJIS Security Addendum.

(CJIS) Criminal Justice Information Services Certified Practice Test

(CJIS) Criminal Justice Information Services Certified Practice Test

CJIS Mobile Device & Cloud Security 2