CJIS Information Security & Access Control — Questions and Answers
Question 1: What is the main goal of information security?
- Increase data sharing
- Protect data confidentiality (Correct answer)
- Limit user access
- Reduce data size
Correct answer: Protect data confidentiality
To protect data confidentiality, integrity, and availability.
Question 2: What does access control restrict?
- All access
- Authorized access only (Correct answer)
- Physical access only
- No restrictions
Correct answer: Authorized access only
It limits user access to authorized resources only.
Question 3: What is multi-factor authentication?
- Single password
- Two or more verifications (Correct answer)
- No authentication
- Anonymous access
Correct answer: Two or more verifications
Security requiring two or more verification methods.
Question 4: Which is a physical security control?
- Passwords
- Locks and badges (Correct answer)
- Encryption
- Firewalls
Correct answer: Locks and badges
Measures like locks and badges prevent unauthorized entry.
Question 5: Why is regular password updating important?
- To confuse users
- To prevent unauthorized access (Correct answer)
- To increase helpdesk calls
- To speed login
Correct answer: To prevent unauthorized access
It helps prevent unauthorized access.
Question 6: What is a firewall used for?
- To cool servers
- Control network traffic (Correct answer)
- Store data
- Manage passwords
Correct answer: Control network traffic
To monitor and control incoming and outgoing network traffic.
Question 7: What is the principle of least privilege?
- Full access
- Minimum necessary access (Correct answer)
- No access
- Random access
Correct answer: Minimum necessary access
Users get only the access necessary to perform their job.
Question 8: How does encryption protect data?
- Deletes data
- Makes data unreadable (Correct answer)
- Copies data
- Shares data
Correct answer: Makes data unreadable
By converting it to unreadable form without keys.
Question 9: Why monitor access logs?
- Ignore attempts
- Detect unauthorized access (Correct answer)
- Store passwords
- Backup data
Correct answer: Detect unauthorized access
To detect unauthorized access attempts.
CJIS Information Security & Access Control
What is the main goal of information security?