CJIS Network Security & Authentication 3

Question 1

Which port is commonly used for HTTPS traffic, which CJIS recommends for secure web-based CJI access?

Accepted Answer

Port 443

Answer

HTTPS operates on port 443 and uses TLS encryption, meeting CJIS requirements for secure web-based data transmission.

Question 2

A CJIS-connected agency wants to allow remote officers to access CJI from the field. What is required?

Accepted Answer

A VPN with FIPS 140-2 validated encryption and Advanced Authentication

Answer

Remote access to CJI must use a FIPS 140-2 validated VPN and Advanced Authentication to satisfy CJIS requirements.

Question 3

Under CJIS policy, what must happen if a user account has been inactive for 90 days?

Accepted Answer

The account must be disabled

Answer

CJIS requires that user accounts inactive for 90 days be disabled to reduce unauthorized access risk.

Question 4

Which network security control does CJIS policy require to monitor and control traffic between network segments in a CJI environment?

Accepted Answer

Boundary protection devices such as firewalls and routers with ACLs

Answer

CJIS requires boundary protection devices (firewalls, routers with ACLs) to monitor and control inter-segment traffic in CJI environments.

Question 5

What minimum password length does CJIS Security Policy require for accounts accessing CJI?

Accepted Answer

8 characters

Answer

CJIS requires a minimum password length of 8 characters for accounts that access Criminal Justice Information.

(CJIS) Criminal Justice Information Services Certified Practice Test