CJIS SECURITY COMPREHENSIVE EXAM 2026
TEST PAPER QUESTIONS AND SOLUTIONS
● What agencies should have written policy describing the actions to be
taken in the event of a security incident? Answer: Every agency
accessing CJI
● Criminal History Record Information (CHRI) is arrest-based data and
any derivative information from that record. Answer: True
● During social engineering, someone pretends to be ________ in an
attempt to gain illicit access to protected data systems. Answer: an
authorized user or other trusted source
● Who should report any suspected security incident? Answer: All
personnel
● Hard copies of CJI data should be ________when no longer required.
Answer: physically destroyed
● Users do not need to log off of the software/system at the end of the
shift or when another operator wants to use the software/system.
Answer: False
TEST PAPER QUESTIONS AND SOLUTIONS
● What agencies should have written policy describing the actions to be
taken in the event of a security incident? Answer: Every agency
accessing CJI
● Criminal History Record Information (CHRI) is arrest-based data and
any derivative information from that record. Answer: True
● During social engineering, someone pretends to be ________ in an
attempt to gain illicit access to protected data systems. Answer: an
authorized user or other trusted source
● Who should report any suspected security incident? Answer: All
personnel
● Hard copies of CJI data should be ________when no longer required.
Answer: physically destroyed
● Users do not need to log off of the software/system at the end of the
shift or when another operator wants to use the software/system.
Answer: False
