LEIN Data Security & Privacy Protocols 4

Question 1

Under LEIN security policy, what is the minimum standard for passwords used to access LEIN terminals?

Accepted Answer

8 characters minimum with complexity requirements including letters and numbers

Answer

FBI CJIS Security Policy mandates passwords of at least 8 characters with complexity requirements for systems accessing criminal justice information.

Question 2

A LEIN operator inadvertently queries the wrong person's record due to a name similarity. Under protocol, the operator should:

Accepted Answer

Document the error and report it to the TAC per agency policy

Answer

Inadvertent queries must be documented and reported to the TAC so the agency maintains accurate audit records and can assess any privacy impact.

Question 3

Which of the following scenarios represents an appropriate use of LEIN's Interstate Identification Index (III)?

Accepted Answer

Checking a suspect's criminal history prior to an interview during an active investigation

Answer

III queries are authorized for criminal justice purposes such as active investigations, not non-criminal justice employment screening without proper authorization.

Question 4

What must a LEIN terminal agency do when it experiences a data breach that may have exposed CJIS information?

Accepted Answer

Immediately notify MSP-CJIC and follow the CJIS Security Policy breach notification procedures

Answer

CJIS Security Policy requires immediate notification to the state CSO (MSP-CJIC) upon discovering a security breach involving CJI.

Question 5

Under LEIN policy, the 'need-to-know' principle means that LEIN information may only be accessed when:

Accepted Answer

There is a specific, articulable law enforcement purpose for the query

Answer

The need-to-know principle restricts LEIN access to situations where there is a specific, documented law enforcement justification for each query.

(LEIN) Law Enforcement Information Network Certification Practice Test

(LEIN) Law Enforcement Information Network Certification Practice Test

LEIN Data Security & Privacy Protocols 4