NCIC Certification Exam — Questions and Answers
Question 1: Which NCIC stolen property file would be most appropriate for tracking stolen currency with recorded serial numbers?
- NCIC Stolen Vehicle File
- NCIC Stolen Article File (Correct answer)
- NCIC Wanted Person File
- NCIC Stolen Securities File
Correct answer: NCIC Stolen Article File
Stolen currency with recorded serial numbers is entered into the NCIC Stolen Article File, where currency is listed as an identifiable article.
Question 2: A new officer joins the agency and requires NCIC access. What must the TAC ensure before granting this access?
- The officer has signed a waiver of liability for misuse.
- The officer has completed required training and passed certification. (Correct answer)
- The officer has been issued a new computer and password.
- The officer has at least one year of patrol experience.
Correct answer: The officer has completed required training and passed certification.
Access to NCIC is strictly controlled and requires documented proof of training. The TAC is responsible for verifying that any user has completed all mandatory security awareness and system-specific training and passed certification before they are granted credentials.
Question 3: Under what circumstances would an officer query both the Stolen Vehicle file and the Stolen License Plate file separately during a traffic stop?
- When the officer wants to check whether the plates are legitimately associated with the vehicle or may have been stolen from another vehicle (Correct answer)
- Only when directed by their sergeant to run a comprehensive check
- Only when the vehicle is a commercial truck or specialty vehicle
- This is never necessary — a single NCIC query covers all stolen files simultaneously
Correct answer: When the officer wants to check whether the plates are legitimately associated with the vehicle or may have been stolen from another vehicle
Querying both files separately allows an officer to determine not only whether the vehicle itself is stolen, but also whether the license plates on the vehicle may have been stolen from a different vehicle — a tactic used to disguise stolen vehicles.
Question 4: How does the NCIC Identity Theft File protect victims when an identity thief is arrested?
- It notifies the victim directly via email
- It alerts the arresting officer that the identity being used by the arrested person may be stolen, preventing an innocent victim from having a false arrest record (Correct answer)
- It freezes the victim's financial accounts
- It automatically alerts credit bureaus
Correct answer: It alerts the arresting officer that the identity being used by the arrested person may be stolen, preventing an innocent victim from having a false arrest record
When an impostor using a stolen identity is arrested and NCIC is queried, the Identity Theft File hit alerts the officer that the identity may be stolen, protecting the victim from a false record.
Question 5: What action must a law enforcement agency take when it locates a missing adult whose record indicates they left voluntarily?
- Take the person into protective custody until the originating agency is notified
- Immediately arrest the person for causing a false police report
- Confirm the person's well-being, determine whether they wish to disclose their location to the reporting party, and cancel the NCIC record (Correct answer)
- Leave the NCIC record active for 30 days to ensure the person does not go missing again
Correct answer: Confirm the person's well-being, determine whether they wish to disclose their location to the reporting party, and cancel the NCIC record
When a voluntarily missing adult is located, the officer must confirm their well-being, respect their right to privacy regarding their location, and cancel the NCIC record.
Question 6: What is the required timeframe for an agency to respond to a hit confirmation request on a wanted person?
- Immediately, within minutes (Correct answer)
- Within 48 hours
- Within 24 hours
- Within 10 minutes
Correct answer: Immediately, within minutes
Hit confirmation must be provided as quickly as possible — ideally within minutes — because officers in the field may be in a potentially dangerous situation awaiting confirmation.
Question 7: The NCIC Interstate Photo System is an advance technology feature that allows agencies to do what?
- Share surveillance footage between agencies in real time
- Access state DMV photo databases through the NCIC terminal
- Attach and retrieve photographic images linked to NCIC person records (Correct answer)
- Transmit crime scene photos to the FBI for analysis
Correct answer: Attach and retrieve photographic images linked to NCIC person records
The Interstate Photo System allows agencies to attach photographs to NCIC person records and retrieve them at the point of a hit, enhancing subject identification.
Question 8: Under NCIC strict compliance, what is required of agencies regarding the physical security of terminals and devices used to access NCIC?
- Physical security requirements only apply to terminals in unsecured public areas
- Agencies must implement physical security controls that prevent unauthorized physical access to NCIC terminals and ensure that unauthorized persons cannot observe or interact with NCIC displays (Correct answer)
- Only agencies with more than 50 officers are required to implement physical security for NCIC terminals
- Physical security is the responsibility of the building owner, not the law enforcement agency
Correct answer: Agencies must implement physical security controls that prevent unauthorized physical access to NCIC terminals and ensure that unauthorized persons cannot observe or interact with NCIC displays
NCIC strict compliance requires agencies to implement physical security controls preventing unauthorized access to terminals and protecting NCIC displays from being observed by unauthorized persons.
Question 9: Under NCIC policy, what should an agency do if the subject of an Identity Theft File record successfully resolves the identity theft issue and no longer needs the protection of the entry?
- Transfer the record to a closed cases database
- Leave the record in place permanently for historical reference
- Modify the record to show inactive status
- Cancel the NCIC Identity Theft File record when the victim requests removal and the agency verifies the issue is resolved (Correct answer)
Correct answer: Cancel the NCIC Identity Theft File record when the victim requests removal and the agency verifies the issue is resolved
When a victim requests removal and the agency verifies the identity theft issue is resolved, the entering agency should cancel the NCIC Identity Theft File record.
Question 10: A 19-year-old individual with a diagnosed developmental disability wanders away from their group home. Which category is most appropriate for their entry into the Missing Person File?
- Disability (Correct answer)
- Catastrophe Victim
- Juvenile
- Involuntary
Correct answer: Disability
The 'Disability' category is specifically for individuals who are missing and have a proven physical or mental disability, making them subject to harm or injury. While they might also be considered 'Endangered,' the 'Disability' category is more specific to the known circumstances.
Question 11: What is the 'entry requirement' that must be met before a property record can be entered into NCIC?
- The victim must have filed a civil lawsuit against the suspected thief
- There must be a verified theft report and the property must have identifying characteristics such as a serial number or unique description (Correct answer)
- The stolen property must have a minimum value of $1,000
- Only property stolen across state lines may be entered into NCIC
Correct answer: There must be a verified theft report and the property must have identifying characteristics such as a serial number or unique description
To enter a stolen property record into NCIC, there must be a verified theft report and the property must have identifying characteristics — such as a serial number, make, model, or unique description — to enable matching.
Question 12: How does the NCIC Messaging System enhance law enforcement efficiency?
- By ensuring secure, real-time communication among agencies (Correct answer)
- By storing case files for historical records
- By automating the arrest process
- By broadcasting messages to the general public
Correct answer: By ensuring secure, real-time communication among agencies
The NCIC Messaging System significantly enhances law enforcement efficiency by providing a secure and real-time platform for inter-agency communication. This allows different agencies to quickly and safely share vital information, coordinate efforts, and respond more effectively to criminal activities and emergencies, improving overall operational effectiveness.
Question 13: For a misdemeanor offense to be eligible for entry into the NCIC Wanted Person File, what must the entering agency establish?
- A minimum bond amount set by a court
- Approval from a state attorney general
- That the misdemeanor is classified as a 'serious' offense (Correct answer)
- Federal jurisdiction over the offense
Correct answer: That the misdemeanor is classified as a 'serious' offense
Not all misdemeanors qualify for NCIC entry; the entering agency must establish that the offense constitutes a serious misdemeanor under applicable criteria.
Question 14: What is the primary criterion for entering a person into the Missing Person File under the 'Endangered' category?
- The person's disappearance poses a credible threat to their safety. (Correct answer)
- The person is over 21 years of age and missing.
- The person has been missing for more than 72 hours.
- The person is in the company of a non-custodial parent.
Correct answer: The person's disappearance poses a credible threat to their safety.
The 'Endangered' category is used when the circumstances of the disappearance indicate that the person's physical safety is in danger due to the situation itself, not just their age or a pre-existing condition. This implies a credible threat that requires an urgent law enforcement response.
Question 15: When entering a stolen vehicle into NCIC, what should an agency do if the VIN has been altered or removed from the vehicle?
- Wait for the FBI to recover the VIN before entering
- Only enter a vehicle theft report into the state system — NCIC requires a complete VIN
- Document the known partial VIN or vehicle identification information and enter the most complete record possible, noting VIN alteration in appropriate fields (Correct answer)
- The vehicle cannot be entered into NCIC without a VIN
Correct answer: Document the known partial VIN or vehicle identification information and enter the most complete record possible, noting VIN alteration in appropriate fields
When a VIN is altered or removed, the agency should enter as much identifying information as possible, noting the VIN alteration, to create a useful record even without a complete, intact VIN.
Question 16: What is the TAC's responsibility when a new employee joins the agency and requires NCIC access?
- The TAC's role is limited to entering the new employee's name in the access log
- The new employee must apply directly to the FBI CJIS Division for access
- The TAC ensures the employee completes required training, signs user agreements, undergoes background screening, and receives access only after all prerequisites are met (Correct answer)
- The TAC activates NCIC access immediately upon the employee's hire date
Correct answer: The TAC ensures the employee completes required training, signs user agreements, undergoes background screening, and receives access only after all prerequisites are met
Before activating NCIC access for new personnel, the TAC must ensure they complete required training, sign user agreements, undergo appropriate background screening, and meet all other access prerequisites.
Question 17: How does NCIC use automation to improve efficiency?
- By prioritizing old data over real-time updates
- Through automatic matching of queried information with database records (Correct answer)
- By generating automatic alerts for expired files
- By replacing human decision-making entirely
Correct answer: Through automatic matching of queried information with database records
NCIC leverages automation primarily through its ability to automatically match queried information against its vast database records. This automated matching process provides immediate results for inquiries, significantly speeding up investigations and reducing the manual effort required to identify relevant information such as wanted persons or stolen items.
Question 18: Who is authorized to enter records into the NCIC Identity Theft File?
- The Social Security Administration
- Authorized criminal justice agencies on behalf of identity theft victims (Correct answer)
- Any individual who has been a victim of identity theft
- Credit reporting agencies
Correct answer: Authorized criminal justice agencies on behalf of identity theft victims
Records in the NCIC Identity Theft File must be entered by authorized criminal justice agencies on behalf of victims, not by private individuals directly.
Question 19: What does a 'No Record' response from an III query indicate?
- The III system is temporarily offline for maintenance.
- The subject has never been arrested anywhere in the United States.
- The subject has successfully expunged their entire criminal record.
- The FBI's III has no identifiable record based on the search criteria submitted. (Correct answer)
Correct answer: The FBI's III has no identifiable record based on the search criteria submitted.
A 'No Record' response means that based on the identifiers provided (name, DOB, etc.), the III system did not find a matching record. It does not definitively mean the person has no criminal history, as records could exist at a local or state level that are not in the III.
Question 20: Which federal agency is primarily responsible for supervising individuals with records in the NCIC Supervised Release File?
- ICE
- DEA
- FBI
- U.S. Probation and Pretrial Services and the U.S. Parole Commission (Correct answer)
Correct answer: U.S. Probation and Pretrial Services and the U.S. Parole Commission
The U.S. Probation and Pretrial Services System and the U.S. Parole Commission are primarily responsible for supervising federal offenders tracked in the Supervised Release File.
Question 21: What is the purpose of the NCIC Compressed Structured Query Language (CSQL) feature?
- To synchronize state databases with the national NCIC database
- To encrypt all outgoing NCIC transmissions
- To allow agencies to query multiple NCIC files simultaneously with a single inquiry (Correct answer)
- To compress large image files before storage
Correct answer: To allow agencies to query multiple NCIC files simultaneously with a single inquiry
CSQL allows a single inquiry to search multiple NCIC files at the same time, reducing the number of transactions required and speeding up the query process.
Question 22: What does the NCIC centralized database use to ensure that only authorized agencies can submit entries and queries?
- IP address whitelisting by state police
- User-specific passwords and biometric verification
- Multi-factor authentication tokens issued by DHS
- Agency-level ORI authentication and terminal agency agreements (Correct answer)
Correct answer: Agency-level ORI authentication and terminal agency agreements
Access to NCIC is controlled through ORI-based agency authentication and signed terminal agency agreements that bind agencies to NCIC policies and security requirements.
Question 23: What is the consequence for a law enforcement agency found to be in non-compliance with NCIC centralized database policies during a triennial audit?
- Automatic referral to the Department of Justice for prosecution
- A fine assessed by the FBI based on the number of violations
- A written warning with no further action
- Immediate suspension of all NCIC access until compliance is demonstrated (Correct answer)
Correct answer: Immediate suspension of all NCIC access until compliance is demonstrated
Agencies found to be significantly non-compliant during a triennial audit may have their NCIC access suspended until they demonstrate corrective action and compliance.
Question 24: When an agency uses III CHRI to make a negative determination (e.g., denial of employment), what must it provide to the affected individual?
- Nothing — negative determinations based on criminal records need not be disclosed
- Notification of the adverse decision and an opportunity to correct or complete the record before the determination is made final (Correct answer)
- A copy of the complete III file
- A formal appeal hearing within 30 days
Correct answer: Notification of the adverse decision and an opportunity to correct or complete the record before the determination is made final
Before making a final negative determination based on CHRI, agencies must notify the affected individual and provide an opportunity to challenge the accuracy of the information.
Question 25: Under what circumstance is a 'Locate' message entered on a Wanted Person record?
- To update the subject's last known address
- To transfer record ownership to the agency that located the subject
- To modify the extradition limitation status of the record
- To notify the entering agency that the subject has been found but not yet arrested (Correct answer)
Correct answer: To notify the entering agency that the subject has been found but not yet arrested
A Locate message is entered when a wanted person has been found but not yet taken into physical custody, alerting the originating agency to take appropriate action.
Question 26: When using the NCIC messaging system for hit confirmation, which transaction type is used to place a 'locate' on a record?
- INQ transaction
- CAR transaction
- MOD transaction
- LOC transaction (Correct answer)
Correct answer: LOC transaction
The LOC (locate) transaction is used to place a locate on an NCIC record, notifying the originating agency that the wanted person, missing person, or property has been located.
Question 27: All active NCIC records must be periodically validated by the originating agency for what purpose?
- To automatically purge all records that are more than 10 years old.
- To ensure the records are still active, accurate, and complete. (Correct answer)
- To provide annual crime statistics to the FBI.
- To bill the agency for its monthly system usage.
Correct answer: To ensure the records are still active, accurate, and complete.
Validation is a mandatory quality control process where the originating agency must review its active records to confirm they are still valid, accurate, and complete. This process ensures the integrity of the NCIC database by removing outdated or incorrect information.
Question 28: What is the purpose of second-party verification for NCIC entries?
- To provide a backup copy of every record entered into NCIC
- To allow two agencies to share responsibility for a single NCIC record
- To ensure that a second trained operator reviews entries for accuracy and completeness before or shortly after submission (Correct answer)
- To speed up the entry process by splitting work between two operators
Correct answer: To ensure that a second trained operator reviews entries for accuracy and completeness before or shortly after submission
Second-party verification ensures data accuracy by requiring a second trained operator to review entries, reducing errors that could harm innocent persons or lead to wrongful enforcement actions.
Question 29: What is the primary purpose of maintaining a secondary dissemination log for NCIC information?
- To create an audit trail of who received CHRI and for what purpose (Correct answer)
- To bill other agencies for information access
- To build a database of frequently queried individuals
- To track system usage for performance metrics
Correct answer: To create an audit trail of who received CHRI and for what purpose
A secondary dissemination log is a critical security and policy requirement. Its purpose is to create a detailed audit trail documenting every instance where Criminal History Record Information (CHRI) is shared outside the initial receiving agency, ensuring accountability and proper use.
Question 30: What transaction type is used in NCIC to cancel an existing record?
- CAN transaction (Correct answer)
- CLR transaction
- DEL transaction
- REM transaction
Correct answer: CAN transaction
The CAN (cancel) transaction is used in NCIC to remove an active record from the database when it is no longer valid.
Question 31: If a wanted person is arrested on the outstanding warrant by a local agency, who is responsible for cancelling the NCIC Wanted Person record?
- The local agency that made the arrest
- The state police headquarters
- The originating agency that entered the record (Correct answer)
- The court that issued the warrant
Correct answer: The originating agency that entered the record
The originating agency that entered the Wanted Person record is responsible for cancelling it upon learning that the subject has been apprehended on the outstanding warrant.
Question 32: Who is responsible for entering protection orders into NCIC — the court that issues the order or the law enforcement agency?
- The law enforcement agency designated by state law or agreement, which may include the court or a law enforcement agency (Correct answer)
- Only state police may enter protection orders into NCIC
- Only the FBI CJIS Division enters protection orders
- The court that issued the order must enter it directly into NCIC
Correct answer: The law enforcement agency designated by state law or agreement, which may include the court or a law enforcement agency
Responsibility for entering protection orders into NCIC varies by state, with some states designating law enforcement agencies and others authorizing courts to enter orders directly or through an intermediary.
Question 33: What is the TAC's role when a law enforcement officer reports that they may have released NCIC information to an unauthorized person?
- The TAC has no role — this is handled exclusively by the officer's supervisor
- Treat the disclosure as a security incident, conduct an initial assessment, document findings, and report to the CSA as required by the CJIS Security Policy incident response requirements (Correct answer)
- Consult with the agency attorney before taking any action
- Privately advise the officer to be more careful in the future
Correct answer: Treat the disclosure as a security incident, conduct an initial assessment, document findings, and report to the CSA as required by the CJIS Security Policy incident response requirements
Potential unauthorized disclosure of NCIC information must be treated as a security incident, documented, assessed, and reported to the CSA in accordance with CJIS Security Policy incident response requirements.
Question 34: What technological feature ensures the security of the NCIC database?
- Unrestricted database access
- Advanced encryption protocols (Correct answer)
- Publicly accessible firewalls
- Open-source software
Correct answer: Advanced encryption protocols
To protect the highly sensitive data it contains, the NCIC database utilizes advanced encryption protocols. These protocols scramble the data, making it unreadable to unauthorized individuals and ensuring that only certified criminal justice personnel with the proper decryption keys can access and interpret the information, thus maintaining data security and integrity.
Question 35: Under what circumstances may an agency re-enter a record into NCIC after it has been cancelled?
- Only after a 30-day waiting period
- Only with prior FBI CJIS approval
- Never — once cancelled, a record cannot be re-entered
- If the basis for the entry recurs — such as if a court re-issues a recalled warrant or a property is stolen again — a new entry is permitted (Correct answer)
Correct answer: If the basis for the entry recurs — such as if a court re-issues a recalled warrant or a property is stolen again — a new entry is permitted
A new NCIC record may be entered if the legal basis for an entry recurs — for example, if a court re-issues a warrant that had been recalled or if property that was previously recovered is subsequently stolen again.
Question 36: Which identifier must be included in all NCIC message transactions to ensure proper routing and accountability?
- The operator's personal identification number (PIN)
- The state code and county identifier
- The terminal's serial number
- The Originating Agency Identifier (ORI) (Correct answer)
Correct answer: The Originating Agency Identifier (ORI)
The Originating Agency Identifier (ORI) must be included in all NCIC transactions, including messages, to ensure proper routing and to maintain accountability.
Question 37: What is the National Sex Offender Registry (NSOR) file in NCIC used for?
- To store complete sex offender registration records nationwide
- To track the real-time location of registered sex offenders
- To maintain a list of all convicted sex offenders for public access
- To serve as a pointer to state sex offender registration records for law enforcement use (Correct answer)
Correct answer: To serve as a pointer to state sex offender registration records for law enforcement use
The NCIC NSOR file serves as a pointer system for law enforcement, directing inquiries to state sex offender registration databases that contain full registration details.
Question 38: If a stolen vehicle is recovered by the owner personally (not by law enforcement), what obligation does the owner have?
- The owner must notify the law enforcement agency that took the theft report so the NCIC record can be cancelled (Correct answer)
- No obligation — the owner keeps the vehicle and the NCIC record will automatically expire
- The owner must file a court order to have the NCIC record removed
- The owner must report the recovery to the DMV within 24 hours
Correct answer: The owner must notify the law enforcement agency that took the theft report so the NCIC record can be cancelled
When an owner recovers their stolen vehicle, they must notify the reporting law enforcement agency so the NCIC record can be promptly cancelled and prevent any further enforcement action based on the stale record.
Question 39: How does NCIC's Supervised Release file utilize technology to monitor individuals on probation or parole?
- It automatically alerts supervising officers whenever the subject is queried by any agency
- It links to the offender's smartphone for location reporting
- It stores release conditions, restrictions, and supervising officer contact information for officer reference during encounters (Correct answer)
- It integrates with GPS ankle monitor networks to track location in real time
Correct answer: It stores release conditions, restrictions, and supervising officer contact information for officer reference during encounters
The Supervised Release file stores supervision conditions, restrictions, and contact information so officers encountering the subject can immediately access relevant supervision details.
Question 40: Under what NCIC policy must a stolen vehicle record be validated?
- Stolen vehicle records must be validated by the entering agency annually to confirm the vehicle remains stolen and the entry is still accurate (Correct answer)
- Only federal agency entries require annual validation
- Stolen vehicle records never need validation; they remain until cancelled
- Validation is only required every five years
Correct answer: Stolen vehicle records must be validated by the entering agency annually to confirm the vehicle remains stolen and the entry is still accurate
NCIC stolen vehicle records must be validated annually by the entering agency to confirm the vehicle remains stolen and the information is accurate.
Question 41: If an agency discovers an error in an active Wanted Person record it entered, what is the correct procedure?
- Submit a written correction request to the state repository
- Contact the FBI CJIS Division to request a correction
- Cancel the record and re-enter it with corrected information
- Use the modify transaction to correct the error in the existing record (Correct answer)
Correct answer: Use the modify transaction to correct the error in the existing record
Agencies should use the NCIC modify transaction to correct errors in existing active records rather than canceling and re-entering them.
Question 42: What are the key fields that must be included in an NCIC Stolen Vehicle File entry?
- Only the VIN and the theft date
- Vehicle identification number (VIN), license plate, state, make, model, year, color, and reason for entry (Correct answer)
- Only the license plate and owner name
- Insurance information and VIN
Correct answer: Vehicle identification number (VIN), license plate, state, make, model, year, color, and reason for entry
NCIC Stolen Vehicle entries must include the VIN, license plate information, state, make, model, year, color, and reason for entry to enable accurate identification.
Question 43: Which of the following technologies is integrated with NCIC to improve its effectiveness?
- Biometric data systems for identification (Correct answer)
- Virtual reality for training exercises
- Artificial intelligence for predictive policing
- Blockchain for transaction recording
Correct answer: Biometric data systems for identification
NCIC integrates with biometric data systems, such as fingerprint and facial recognition databases, to enhance identification capabilities. This integration allows law enforcement to cross-reference biometric information collected in the field with existing records, improving the accuracy and speed of identifying suspects or missing persons.
Question 44: What must an agency do when it discovers that III CHRI it received contains an error that could harm an individual?
- Notify the originating state or agency and the individual affected (Correct answer)
- Contact the FBI to have the record deleted from III
- Retain the record but note the error in the case file
- File a report with the Department of Justice within 30 days
Correct answer: Notify the originating state or agency and the individual affected
When an error in III CHRI is discovered, the agency must notify the originating state or agency responsible for the record and should take steps to notify the affected individual.
Question 45: What action must an entering agency take in NCIC when the subject of a Wanted Person record is confirmed deceased?
- Modify the record to reflect deceased status and retain it for 5 years
- Leave the record active until the warrant's statutory expiration date
- Cancel the record, as the warrant is no longer actionable (Correct answer)
- Transfer the record to the Unidentified Persons File
Correct answer: Cancel the record, as the warrant is no longer actionable
Death of the subject renders the arrest warrant moot; the entering agency must cancel the Wanted Person record to prevent it from generating erroneous hits.
Question 46: When a stolen firearm is recovered and returned to its owner, what NCIC action must the entering agency take?
- Archive the record for potential future theft
- Cancel the stolen firearm record immediately from NCIC (Correct answer)
- Modify the record to show 'recovered' status and leave it active
- Transfer the record to the owner's file for reference
Correct answer: Cancel the stolen firearm record immediately from NCIC
Upon recovery and return of a stolen firearm, the entering agency must immediately cancel the NCIC Stolen Gun File record.
Question 47: What is the significance of "Hot Files" in the NCIC?
- They are accessible to the general public for awareness
- They include classified national information only
- They contain outdated records scheduled for deletion
- They include real-time alerts for immediate law enforcement action (Correct answer)
Correct answer: They include real-time alerts for immediate law enforcement action
"Hot Files" in the NCIC refer to records that require immediate attention or action from law enforcement, such as wanted persons, stolen vehicles, or missing persons. These files generate real-time alerts when a query matches an entry, enabling officers to respond promptly and take appropriate action in critical situations.
Question 48: An officer at a pawnshop finds a television and a stolen article hit is returned from NCIC. What is the correct next step?
- Verify the item's serial number against the NCIC record and obtain hit confirmation before taking enforcement action (Correct answer)
- Release the television since the pawnshop may have bought it in good faith
- Immediately seize the television and charge the pawnshop owner with receiving stolen property
- Log the hit and take no further action until a detective arrives
Correct answer: Verify the item's serial number against the NCIC record and obtain hit confirmation before taking enforcement action
The officer must verify the television's serial number against the NCIC record and obtain hit confirmation before taking enforcement action.
Question 49: When an agency enters a record with an error and another agency has already queried or acted on that record, what is the correct procedure?
- The originating agency must correct the record via MOD or cancel and re-enter, and must notify any agency known to have received incorrect information (Correct answer)
- The record can be silently corrected with no further action needed
- The FBI CJIS must be notified before any correction is made
- Errors discovered after queries cannot be corrected
Correct answer: The originating agency must correct the record via MOD or cancel and re-enter, and must notify any agency known to have received incorrect information
The originating agency must correct the record and notify any agencies that may have received or acted on the erroneous information so they can take appropriate corrective action.
Question 50: During second-party verification, who is the 'second party' that reviews a record before it is entered into NCIC?
- An FBI CJIS employee
- A second trained NCIC operator at the entering agency (Correct answer)
- A supervisor at the entering agency
- A criminal court judge
Correct answer: A second trained NCIC operator at the entering agency
The second party in second-party verification is a second trained NCIC operator at the same agency who independently reviews the record for accuracy before or after entry.
Question 51: What is the significance of the Originating Agency Identifier (ORI) in the NCIC centralized database?
- It is a code assigned to each individual record for tracking purposes
- It is a password used to authenticate terminal operators
- It uniquely identifies each agency authorized to enter and access NCIC data (Correct answer)
- It identifies the geographic region where a crime occurred
Correct answer: It uniquely identifies each agency authorized to enter and access NCIC data
The ORI is a unique identifier assigned to each law enforcement agency authorized to participate in NCIC, linking every record and query to the agency responsible for it.
Question 52: When may a criminal justice agency legally access NCIC to obtain CHRI about a private citizen who has filed a complaint with that agency?
- Never — complainants may not be queried through NCIC
- Only if the complainant has a prior criminal record
- When there is a legitimate law enforcement reason, such as verifying the complainant's identity or ensuring the officer's safety during a follow-up contact (Correct answer)
- Only with the complainant's written consent
Correct answer: When there is a legitimate law enforcement reason, such as verifying the complainant's identity or ensuring the officer's safety during a follow-up contact
A criminal justice agency may access CHRI on a complainant when there is a legitimate, documented law enforcement need — such as identity verification or officer safety — and the query falls within an authorized criminal justice purpose.
Question 53: The TAC is responsible for ensuring that what specific type of security screening is completed for all personnel with NCIC access?
- A character reference check from two supervisors
- A credit history check only
- A social media review conducted by the TAC personally
- A CJIS-compliant background investigation including fingerprint-based criminal history check (Correct answer)
Correct answer: A CJIS-compliant background investigation including fingerprint-based criminal history check
CJIS Security Policy requires a fingerprint-based criminal history background check for all personnel with access to Criminal Justice Information, including NCIC — the TAC ensures this is completed.
Question 54: Who is authorized to use the NCIC Messaging System?
- Certified law enforcement personnel and authorized users (Correct answer)
- Journalists reporting on criminal cases
- Civilian government employees in administrative roles
- Private detectives with valid licenses
Correct answer: Certified law enforcement personnel and authorized users
Similar to accessing the NCIC database, the NCIC Messaging System is strictly limited to certified law enforcement personnel and other authorized criminal justice users. This ensures the integrity and confidentiality of sensitive communications, preventing unauthorized access and maintaining the security of law enforcement operations and investigations.
Question 55: An officer stops a vehicle and queries NCIC. The response shows a hit in the Supervised Release File. What does this mean for the officer's response?
- The hit can be ignored if the subject has no criminal history
- The officer should be aware that the subject is under supervision conditions and verify compliance; the hit alone does not necessarily require immediate arrest (Correct answer)
- The subject must be immediately arrested without further inquiry
- The officer should transfer the subject to federal custody immediately
Correct answer: The officer should be aware that the subject is under supervision conditions and verify compliance; the hit alone does not necessarily require immediate arrest
A supervised release hit alerts the officer that the subject is under federal supervision. The officer should verify compliance with supervision conditions, but the hit alone does not require immediate arrest.
Question 56: Which purpose code would be used when conducting a CHRI inquiry for a firearms transfer background check through NICS?
- Purpose code F (Correct answer)
- Purpose code E
- Purpose code G
- Purpose code C
Correct answer: Purpose code F
Purpose code 'F' is used for firearms-related background checks, including those conducted in connection with the National Instant Criminal Background Check System (NICS).
Question 57: When entering a stolen vehicle into the NCIC Vehicle File, what is the most critical piece of identifying information required?
- Owner's Name (OWN)
- Vehicle Identification Number (VIN) (Correct answer)
- Vehicle Color (VCO)
- License Plate Number (LIC)
Correct answer: Vehicle Identification Number (VIN)
The Vehicle Identification Number (VIN) is the unique, permanent identifier for a vehicle and is the primary key for the NCIC Vehicle File record. While the license plate is important, it can be easily changed, making the VIN the most reliable identifier.
Question 58: How often must NCIC Protection Order records be validated to ensure they remain current?
- Every 5 years
- Every 6 months
- Annually (Correct answer)
- Every 30 days
Correct answer: Annually
Protection Order records in NCIC must be validated annually to confirm the order is still in effect, has not been modified, and continues to meet entry criteria.
Question 59: Which of the following is a MANDATORY field when entering a record into the NCIC Wanted Person File?
- Social Security Number
- Date of Birth (Correct answer)
- Tattoo description
- Fingerprint classification code
Correct answer: Date of Birth
Date of Birth is a mandatory field for Wanted Person File entries because it is essential for accurately identifying the subject.
Question 60: What physical evidence can be entered into NCIC's Unidentified Person file to assist in identifying human remains?
- Only DNA profiles from medical examiners
- Only dental records and physical descriptions
- Fingerprints, DNA profiles, dental records, physical descriptors, scars/marks/tattoos, and attached images (Correct answer)
- Only fingerprints and photographs
Correct answer: Fingerprints, DNA profiles, dental records, physical descriptors, scars/marks/tattoos, and attached images
NCIC's Unidentified Person file accepts a comprehensive range of identifying information including fingerprints, DNA, dental records, physical descriptors, scars/marks/tattoos, and attached images.
Question 61: Which NCIC feature was designed specifically to streamline the hit confirmation process between agencies?
- Hit Confirmation Alert System
- NCIC Direct Connect portal
- Locate notification and administrative message capability (Correct answer)
- Compressed Structured Query Language (CSQL)
Correct answer: Locate notification and administrative message capability
The locate notification and administrative message capability allows agencies to send and receive hit confirmation messages electronically through the NCIC network, streamlining the confirmation process.
Question 62: What is one key feature of the NCIC that makes it effective for law enforcement?
- It operates only during working hours
- It allows public updates to the database
- It provides real-time access to critical information (Correct answer)
- It charges a fee for each query
Correct answer: It provides real-time access to critical information
One of the most crucial features of the NCIC is its ability to provide law enforcement officers with real-time access to critical crime-related information. This immediate availability of data, such as wanted persons or stolen property records, allows officers to make informed decisions quickly and safely in the field, significantly enhancing operational effectiveness.
Question 63: Which NCIC transaction type is used to send a general administrative message to another agency without reference to a specific record?
- AD transaction (Correct answer)
- QW transaction
- MH transaction
- NQ transaction
Correct answer: AD transaction
The AD (administrative) transaction type is used to send general administrative messages to other agencies over the NCIC network without referencing a specific record.
Question 64: What is a 'compliance audit' in the NCIC context, and how often is it conducted?
- An internal review conducted monthly by each agency
- An annual self-assessment completed by the TAC and submitted to the FBI
- A comprehensive review of agency practices, records, and security controls conducted by the CJIS Systems Agency or FBI every three years (Correct answer)
- A random spot-check conducted by state police without advance notice
Correct answer: A comprehensive review of agency practices, records, and security controls conducted by the CJIS Systems Agency or FBI every three years
A CJIS compliance audit is a comprehensive triennial review conducted by the CSA or FBI that evaluates the agency's adherence to all NCIC and CJIS policies, security requirements, and record management practices.
Question 65: What is the primary purpose of the NCIC Stolen Gun File?
- To track all firearms purchased in the United States
- To enable law enforcement to identify stolen firearms and link them to crimes, reducing illegal trafficking (Correct answer)
- To track licensed firearms dealers
- To register firearms with the federal government
Correct answer: To enable law enforcement to identify stolen firearms and link them to crimes, reducing illegal trafficking
The Stolen Gun File enables identification of stolen firearms, supporting recovery efforts and linking weapons to crimes, which helps combat illegal firearms trafficking.
Question 66: An agency is conducting a background check for a candidate applying for a position as a 911 dispatcher. Which NCIC Purpose Code should be used for this query?
- D - Domestic Violence/Stalking
- J - Juvenile Justice
- F - Firearms-Related
- C - Criminal Justice Employment (Correct answer)
Correct answer: C - Criminal Justice Employment
Purpose Code C is specifically designated for use by criminal justice agencies conducting background checks for the purpose of employment within that agency. A 911 dispatcher position falls directly under this category.
Question 67: Under NCIC policy, what must an agency verify before entering a stolen vehicle record into the system?
- That the vehicle is worth more than $5,000
- That a theft report has been filed, the vehicle meets entry criteria, and the owner has been advised the vehicle will be entered into NCIC (Correct answer)
- That the vehicle was insured at the time of theft
- That fingerprints have been collected from the vehicle
Correct answer: That a theft report has been filed, the vehicle meets entry criteria, and the owner has been advised the vehicle will be entered into NCIC
Before NCIC entry, the agency must have a filed theft report, confirm the vehicle meets entry requirements, and advise the owner that the vehicle is being entered into NCIC.
Question 68: What is the purpose of the NCIC transaction type 'MOD'?
- To flag a record for FBI review
- To modify the originating agency identifier of a record
- To update specific fields of an existing NCIC record without cancelling and re-entering the entire record (Correct answer)
- To transfer ownership of a record to another agency
Correct answer: To update specific fields of an existing NCIC record without cancelling and re-entering the entire record
The MOD transaction updates specific data fields in an existing NCIC record, allowing the originating agency to correct or update information without cancelling the entire record.
Question 69: What is the significance of the Message Key in NCIC transactions?
- It identifies the specific operator who sent the transaction
- It is a password required to open administrative messages
- It is a unique identifier assigned to each transaction that enables tracking and retrieval of that specific communication (Correct answer)
- It is the encryption key used to secure the message contents
Correct answer: It is a unique identifier assigned to each transaction that enables tracking and retrieval of that specific communication
The Message Key is a unique identifier assigned to each NCIC transaction that enables agencies and the FBI to track, retrieve, and audit specific communications.
Question 70: What must an entering agency do when a stolen vehicle is recovered in another state before the entering agency is notified?
- The recovering agency cancels the record automatically
- The recovering agency must notify the entering agency, which must then promptly cancel the NCIC stolen vehicle record (Correct answer)
- The record automatically clears after 30 days
- Both agencies must agree before the record is cancelled
Correct answer: The recovering agency must notify the entering agency, which must then promptly cancel the NCIC stolen vehicle record
The recovering agency notifies the entering agency, which retains responsibility for cancelling the stolen vehicle record from NCIC.
Question 71: Which of the following is a key feature of the NCIC Messaging System?
- Ability to upload unlimited video files
- Integration with social media platforms
- Real-time transmission of law enforcement data (Correct answer)
- Open access for all government employees
Correct answer: Real-time transmission of law enforcement data
A key feature of the NCIC Messaging System is its capability for real-time transmission of law enforcement data. This allows agencies to quickly share urgent information, such as suspect descriptions or critical updates, ensuring that officers in the field have the most current intelligence available for their operations and responses.
Question 72: When CHRI is received on a terminal screen or printout, what is a key requirement for its physical security?
- It must be secured from unauthorized access and destroyed when no longer needed. (Correct answer)
- It must be emailed to all officers in the department for their information.
- It must be shredded immediately after viewing, regardless of investigative need.
- It must be posted on a departmental bulletin board for officer awareness.
Correct answer: It must be secured from unauthorized access and destroyed when no longer needed.
Agencies must have policies to protect CHRI from unauthorized viewing, use, or dissemination. This includes securing printouts from public view and properly destroying them (e.g., shredding) once they have served their official purpose.
Question 73: What is the entering agency's obligation when a protected person informs them that a protection order has been vacated by the court?
- Archive the record for future reference
- Transfer the record to the protected person's file
- Immediately cancel the NCIC Protection Order record upon receipt of notice that the order has been vacated (Correct answer)
- Continue enforcing the order until notified by the court in writing
Correct answer: Immediately cancel the NCIC Protection Order record upon receipt of notice that the order has been vacated
When a protection order is vacated by the court, the entering agency must immediately cancel the NCIC record to prevent enforcement of a no-longer-valid order.
Question 74: Which combination of data elements is most likely to yield a successful and accurate query of the National Sex Offender Registry (NSOR) file?
- Last Name and State of Residence
- Social Security Number only
- Full Name and Date of Birth (Correct answer)
- Eye Color and Height
Correct answer: Full Name and Date of Birth
While other identifiers can be helpful, a combination of the subject's full name (first and last) and complete date of birth provides the most effective and specific criteria for searching the NSOR file. This combination minimizes false positives and helps ensure the correct individual is identified.
Question 75: What is the time requirement for entering a missing person record for a juvenile (under 21) into NCIC after receiving the minimum required data?
- 2 hours (Correct answer)
- 24 hours
- 12 hours
- 4 hours
Correct answer: 2 hours
Federal law (Suzanne's Law) mandates the prompt entry of missing juveniles into NCIC to ensure a rapid response. Agencies are required to enter the record within 2 hours of receiving the minimum necessary information for entry.
Question 76: What records must a TAC maintain to demonstrate compliance with NCIC user access controls?
- A summary report submitted to the FBI annually
- Only the total number of NCIC-authorized users
- Budget records showing the cost of NCIC training per employee
- Individual user access logs, training completion records, signed user agreements, and documentation of access terminations when personnel leave or change roles (Correct answer)
Correct answer: Individual user access logs, training completion records, signed user agreements, and documentation of access terminations when personnel leave or change roles
TACs must maintain individual user records including access logs, training documentation, user agreements, and records of access modifications or terminations to demonstrate compliance with access control requirements.
Question 77: A police officer uses the NCIC terminal to check the criminal history of their new neighbor out of personal curiosity. This action is considered:
- A serious violation of NCIC policy and federal law (Correct answer)
- A minor infraction that results in a verbal warning
- An acceptable community policing practice
- A permissible 'soft inquiry' that is not logged
Correct answer: A serious violation of NCIC policy and federal law
Accessing NCIC data for any reason other than a legitimate, authorized criminal justice purpose is a serious misuse of the system. This action violates federal regulations (28 CFR Part 20) and agency policy, and can lead to severe consequences including termination and criminal prosecution.
Question 78: An individual on federal supervised release is encountered during a traffic stop in a different state. What should the officer do?
- Arrest the individual immediately for traveling without permission
- Issue a warning and report to the FBI
- Ignore the supervision status since they are outside the supervising district
- Query NCIC for supervised release status, and if a hit is returned, contact the supervising officer or the U.S. Probation Office to verify compliance and receive guidance (Correct answer)
Correct answer: Query NCIC for supervised release status, and if a hit is returned, contact the supervising officer or the U.S. Probation Office to verify compliance and receive guidance
The officer should query NCIC, and if a supervised release hit is returned, contact the supervising officer or U.S. Probation Office to verify whether travel was authorized and receive guidance.
Question 79: Which federal regulation specifically governs the use, management, and dissemination of III criminal history record information?
- 18 U.S.C. § 922 — Unlawful Acts regarding firearms
- 28 CFR Part 20 — Criminal Justice Information Systems (Correct answer)
- 28 CFR Part 16 — Records Requests
- 5 U.S.C. § 552a — The Privacy Act of 1974
Correct answer: 28 CFR Part 20 — Criminal Justice Information Systems
28 CFR Part 20 specifically governs the collection, maintenance, and dissemination of criminal justice information systems data, including III CHRI.
Question 80: What is the primary purpose of maintaining NCIC as a centralized rather than distributed database?
- To allow the FBI to monitor all law enforcement activities
- To ensure only federal agencies can access criminal records
- To reduce the cost of state-level criminal justice databases
- To provide a single, consistent point of access for law enforcement across all jurisdictions (Correct answer)
Correct answer: To provide a single, consistent point of access for law enforcement across all jurisdictions
A centralized NCIC database provides a single, consistent point of access, ensuring that law enforcement agencies nationwide can share and retrieve information using standardized formats and protocols.
Question 81: What is the primary purpose of an NCIC hit confirmation request?
- To immediately arrest the individual or seize the property.
- To update the NCIC record with new information from the field.
- To automatically notify the FBI of a potential match.
- To verify the record is still active and the subject/property is identical to the record. (Correct answer)
Correct answer: To verify the record is still active and the subject/property is identical to the record.
Hit confirmation is a crucial step to ensure the information is accurate, current, and pertains to the exact person or property in question before any enforcement action is taken. This prevents false arrests or seizures based on outdated or incorrect data.
Question 82: Which NCIC file is used to enter information about a living person of unknown identity — such as someone who cannot communicate due to injury or disability?
- Identity Theft file
- Gang file
- Missing Person file
- Unidentified Person file (Correct answer)
Correct answer: Unidentified Person file
The Unidentified Person file is used for living individuals of unknown identity as well as for unidentified human remains.
Question 83: Under the Sex Offender Registration and Notification Act (SORNA), what is the minimum registration period for a Tier III sex offender?
- 15 years
- 10 years
- 25 years
- Life (Correct answer)
Correct answer: Life
SORNA requires Tier III sex offenders — those convicted of the most serious sexual offenses — to register for life.
Question 84: According to NCIC policy, what is the minimum period that transaction and dissemination logs must be retained for audit purposes?
- 30 days
- 6 months
- At least one year (Correct answer)
- Indefinitely
Correct answer: At least one year
NCIC policy mandates that all transaction logs, including secondary dissemination logs, must be maintained for a minimum of one year. This allows for a sufficient time frame for audits to be conducted to ensure compliance with security and usage policies.
Question 85: What type of information is stored in the NCIC Supervised Release File for each subject?
- Only the subject's name and release date
- Medical records from time of incarceration
- Name, physical descriptors, supervision conditions, releasing authority, and supervising officer contact information (Correct answer)
- Financial records related to restitution payments
Correct answer: Name, physical descriptors, supervision conditions, releasing authority, and supervising officer contact information
Supervised Release File records include name, physical descriptors, conditions of release, the releasing authority, and contact information for the supervising officer.
Question 86: In the context of NCIC hit confirmation, what does the term 'extradite' in the Wanted Person file indicate?
- The entering agency's willingness to travel to retrieve the wanted person if apprehended in another jurisdiction (Correct answer)
- The subject has previously fled to avoid prosecution
- The warrant has been issued by a federal court
- The subject is a foreign national wanted by Interpol
Correct answer: The entering agency's willingness to travel to retrieve the wanted person if apprehended in another jurisdiction
The extradite field in the Wanted Person file indicates the extent to which the entering agency is willing to travel to retrieve a wanted person apprehended outside their jurisdiction.
Question 87: What must law enforcement personnel do before accessing NCIC data?
- Obtain public consent
- Complete NCIC certification and training
- Submit a formal application each time (Correct answer)
- Pay an access fee
Correct answer: Submit a formal application each time
To ensure strict accountability and adherence to legal mandates, some interpretations of NCIC access protocols may require a formal justification or 'application' for each instance of data access. This rigorous process helps document the legitimate purpose of every query, preventing unauthorized browsing and ensuring that all data retrievals are tied to specific, permissible law enforcement objectives. Such a system reinforces the principle of 'need to know' and 'right to know' for sensitive criminal justice information.
Question 88: What is the 'critical data' requirement for entering an adult missing person into NCIC under the 'endangered' category?
- The person must have been missing for at least 72 hours before endangered classification applies
- The entry must include specific facts indicating why the person is believed to be in danger of bodily harm or death (Correct answer)
- The endangered classification requires a signed physician's statement
- There must be an active criminal investigation related to the disappearance
Correct answer: The entry must include specific facts indicating why the person is believed to be in danger of bodily harm or death
For the 'endangered' category, the entry must include specific articulable facts indicating why the agency believes the missing person is in danger — not just a general concern that they might be unsafe.
Question 89: For a missing person classified as a 'juvenile,' what age threshold applies for mandatory NCIC entry?
- Under 16 years of age
- Under 18 years of age (Correct answer)
- Under 17 years of age
- Under 21 years of age
Correct answer: Under 18 years of age
Any person under 18 years of age qualifies for entry as a juvenile in the NCIC Missing Person file, and there is no waiting period before entry.
Question 90: Which identifier links a Wanted Person record to the specific law enforcement agency that entered it into NCIC?
- Originating Agency Identifier (ORI) (Correct answer)
- Case Report Number (CRN)
- NCIC File Control Number (FCN)
- National Crime Number (NCN)
Correct answer: Originating Agency Identifier (ORI)
The Originating Agency Identifier (ORI) is a unique nine-character code assigned to each agency that links every record to its entering agency.
Question 91: How does NCIC's strict compliance standard apply to the timeliness of record cancellations?
- Records must be cancelled immediately upon learning the basis for the entry no longer exists — delays violate strict compliance (Correct answer)
- Timeliness standards only apply to wanted person records, not property records
- Cancellations must occur within 48 hours of learning the record is no longer valid
- A 10-business-day grace period is allowed for routine cancellations
Correct answer: Records must be cancelled immediately upon learning the basis for the entry no longer exists — delays violate strict compliance
Strict compliance requires immediate cancellation when the basis for an NCIC record no longer exists — any delay is a violation regardless of how short the delay is.
Question 92: Second-party verification is especially critical for which type of NCIC entry due to the potential consequences of errors?
- Missing property records
- Gang file entries
- Wanted person records (Correct answer)
- Stolen property records
Correct answer: Wanted person records
Wanted person entries require especially rigorous second-party verification because errors can lead to wrongful arrests, unlawful detentions, and significant civil liability.
Question 93: What is the fundamental difference between a QW (Query Wanted) and a QH (Query History) transaction?
- QW searches for wanted person records, while QH specifically requests a criminal history summary. (Correct answer)
- There is no functional difference; they are interchangeable transaction codes.
- QW searches all NCIC files, while QH only searches the III file.
- QW is for in-state queries, and QH is for out-of-state queries.
Correct answer: QW searches for wanted person records, while QH specifically requests a criminal history summary.
A QW is a general query that checks for wanted status across various NCIC 'hot files' (Wanted Person, Protection Order, etc.). A QH is a specific and more restricted request for a criminal history record from the III system, which requires a legally permissible purpose.
Question 94: What is the NCIC policy on 'browsing' — accessing NCIC records out of curiosity or for personal interest without an official law enforcement reason?
- Browsing is permitted for criminal justice researchers with academic credentials
- Browsing is explicitly prohibited as a violation of the strict compliance standard and constitutes inappropriate use subject to disciplinary action and potential criminal penalties (Correct answer)
- Supervisors may authorize browsing for training purposes
- Browsing is permitted as long as no information is printed or retained
Correct answer: Browsing is explicitly prohibited as a violation of the strict compliance standard and constitutes inappropriate use subject to disciplinary action and potential criminal penalties
NCIC explicitly prohibits browsing — accessing records without an official law enforcement purpose — as a violation of the strict compliance standard and the Privacy Act.
Question 95: What is the primary role of the Terminal Agency Coordinator (TAC) within a law enforcement agency?
- To personally enter all NCIC records on behalf of the agency
- To conduct criminal investigations using NCIC data
- To serve as the agency's point of contact with the CJIS Systems Agency and ensure compliance with all NCIC and CJIS security policies (Correct answer)
- To act as the agency's IT director for all computer systems
Correct answer: To serve as the agency's point of contact with the CJIS Systems Agency and ensure compliance with all NCIC and CJIS security policies
The TAC serves as the agency's liaison to the CJIS Systems Agency and is responsible for ensuring the agency's compliance with all NCIC policies and CJIS Security Policy requirements.
Question 96: What should an NCIC user do if they suspect unauthorized access to the system?
- Attempt to block the access themselves
- Report the incident immediately to their supervisor or the FBI (Correct answer)
- Share the information with media outlets for transparency
- Ignore the issue to avoid delays
Correct answer: Report the incident immediately to their supervisor or the FBI
If an NCIC user suspects unauthorized access, immediate reporting to their supervisor or the FBI is crucial. This prompt action allows for a swift investigation into the security breach, enabling containment and mitigation of potential damage to sensitive data and ongoing operations. Rapid reporting helps protect the integrity of the system and prevents further misuse of critical information.
Question 97: What does NCIC policy require when a vehicle is recovered but is considered a total loss before it is cancelled from the Stolen Vehicle file?
- The record may remain active until insurance proceedings are concluded
- Total loss vehicles are automatically cancelled by the FBI within 90 days
- The record must be cancelled upon recovery regardless of condition
- The record must be cancelled immediately upon confirmed recovery, even if the vehicle is a total loss and will be disposed of (Correct answer)
Correct answer: The record must be cancelled immediately upon confirmed recovery, even if the vehicle is a total loss and will be disposed of
Regardless of the recovered vehicle's condition, the NCIC Stolen Vehicle record must be cancelled immediately upon confirmed recovery.
Question 98: How frequently does the FBI require participating agencies to validate their active NCIC records to maintain data accuracy in the centralized database?
- Quarterly
- Annually (Correct answer)
- Monthly
- Every 90 days
Correct answer: Annually
NCIC requires participating agencies to validate their active records annually to confirm continued accuracy, relevance, and that the record still meets entry criteria.
Question 99: What information is required for entry into the NCIC Stolen License Plate file?
- License plate number, issuing state, and plate type (e.g., passenger, commercial) (Correct answer)
- Only the license plate number and the owner's driver's license number
- Only the license plate number — no other fields are required
- License plate number, vehicle make/model, and owner's insurance policy number
Correct answer: License plate number, issuing state, and plate type (e.g., passenger, commercial)
NCIC Stolen License Plate entries require the plate number, the issuing state, and the plate type to create an identifiable record.
Question 100: If a victim obtains a protection order in one state and moves to another, can officers in the new state enforce the original order using NCIC?
- No, a new order must be obtained in the new state
- Only federal officers can enforce out-of-state orders
- Only if the new state's court re-certifies the order
- Yes, NCIC provides the means to enforce valid out-of-state orders under VAWA's full faith and credit provision (Correct answer)
Correct answer: Yes, NCIC provides the means to enforce valid out-of-state orders under VAWA's full faith and credit provision
VAWA requires full faith and credit for qualifying protection orders, and NCIC makes them accessible to officers in any state, enabling nationwide enforcement.
Question 101: How does NCIC define a 'hit' versus a 'possible hit' during the hit confirmation process?
- A hit means the subject is in custody; a possible hit means they are under surveillance
- A possible hit is a computer-generated response indicating a potential match; a confirmed hit results after the originating agency verifies the record (Correct answer)
- A hit is any query response; a possible hit requires follow-up queries
- There is no distinction — all matches are confirmed hits
Correct answer: A possible hit is a computer-generated response indicating a potential match; a confirmed hit results after the originating agency verifies the record
A 'possible hit' is the initial computer-generated response indicating a potential match; it becomes a confirmed hit only after the originating agency verifies the record is still active and accurate.
Question 102: What is the TAC's responsibility when the agency receives a policy update or change from the CJIS Systems Agency?
- Acknowledge receipt but defer implementation until the next triennial audit
- Forward the update to the IT department for implementation
- Consult with other TACs in the region before implementing
- Review the policy change, determine its operational impact, update agency procedures accordingly, train affected personnel, and ensure implementation (Correct answer)
Correct answer: Review the policy change, determine its operational impact, update agency procedures accordingly, train affected personnel, and ensure implementation
When policy updates are received, the TAC must review them, assess their operational impact, update agency procedures, train affected personnel, and ensure timely implementation.
Question 103: After receiving CHRI through an NCIC query, to whom may the receiving agency disseminate that information?
- Only to criminal justice agencies and non-criminal justice entities authorized by the specific purpose code used (Correct answer)
- To the public if it involves a violent felony
- To any government agency upon request
- To any law enforcement agency in the country
Correct answer: Only to criminal justice agencies and non-criminal justice entities authorized by the specific purpose code used
CHRI may only be disseminated to criminal justice agencies and to non-criminal justice entities that are specifically authorized under the purpose code used to obtain the information.
Question 104: Under NCIC's strict compliance framework, when may an agency grant a sworn officer NCIC access before training is completed?
- Emergency access may be granted under strictly supervised conditions in limited circumstances, but formal training must be completed as soon as possible
- NCIC training is only required for officers who will enter records, not those who only query
- Never — training must be fully completed before any NCIC access is permitted (Correct answer)
- Officers may access NCIC immediately upon hire and complete training within 6 months
Correct answer: Never — training must be fully completed before any NCIC access is permitted
Strict compliance requires that training be completed before access is granted — there is no provision for provisional or emergency access before training.
Question 105: When entering a Protection Order into NCIC, which field is critical for determining a person's eligibility to purchase a firearm under federal law?
- Expiration Date
- Issuing Judge's Name
- Brady Indicator (Correct answer)
- Respondent's Vehicle Information
Correct answer: Brady Indicator
The Brady Handgun Violence Prevention Act prohibits certain individuals from possessing firearms. The Brady Indicator field in the NCIC Protection Order file explicitly flags whether the order makes the respondent federally ineligible, which is a critical check during a firearm purchase background check.
Question 106: The NCIC centralized database is operational how many hours per day, days per week?
- 20 hours/day, 7 days/week
- 24 hours/day, 5 days/week
- 24 hours/day, 7 days/week (Correct answer)
- 16 hours/day, 5 days/week
Correct answer: 24 hours/day, 7 days/week
NCIC operates 24 hours a day, 7 days a week, 365 days a year to support law enforcement needs at all times.
NCIC Certification Exam
The NCIC Certification Exam covers the FBI's National Crime Information Center database operations, including record entry, hit confirmation, purpose codes, TAC roles, sex offender registry, protection orders, and CHRI handling.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds
These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- dps.texas.gov — Test delivery, renewal · verified Oct 2026
- fdle.state.fl.us — Test delivery, eligibility, exam format, passing score, retake policy, score release, test dates, score validity · verified Oct 2026