CJIS Network Security & Authentication 2

Question 1

Under CJIS Security Policy, what is the minimum encryption standard required for data in transit over a network?

Accepted Answer

AES with 128-bit keys

Answer

CJIS requires AES 128-bit (or higher) encryption for protecting CJI data transmitted across networks.

Question 2

Which CJIS requirement applies when an agency uses a wireless LAN to transmit criminal justice information?

Accepted Answer

Wireless transmissions must use FIPS 140-2 validated encryption

Answer

CJIS requires FIPS 140-2 validated cryptographic modules for wireless CJI transmissions.

Question 3

A firewall protecting a CJIS-connected network should be configured to follow which principle?

Accepted Answer

Default-deny with explicit permit rules for authorized traffic

Answer

CJIS policy requires a default-deny posture where only explicitly authorized traffic is permitted through firewalls.

Question 4

How often must passwords be changed for accounts with access to Criminal Justice Information under CJIS policy?

Accepted Answer

Every 90 days

Answer

CJIS Security Policy requires passwords for CJI accounts to be changed at minimum every 90 days.

Question 5

What does CJIS policy require regarding session timeouts for systems accessing CJI?

Accepted Answer

Sessions must time out after no more than 30 minutes of inactivity

Answer

CJIS requires workstation sessions to lock or log off automatically after a maximum of 30 minutes of inactivity.

(CJIS) Criminal Justice Information Services Certified Practice Test