Data Security & Privacy Protocols Flashcards
7 cards from real LEIN practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Data Security & Privacy Protocols flashcards as text
Under LEIN security policy, what is the minimum standard for passwords used to access LEIN terminals?
Answer: 8 characters minimum with complexity requirements including letters and numbers
FBI CJIS Security Policy mandates passwords of at least 8 characters with complexity requirements for systems accessing criminal justice information.
A LEIN operator inadvertently queries the wrong person's record due to a name similarity. Under protocol, the operator should:
Answer: Document the error and report it to the TAC per agency policy
Inadvertent queries must be documented and reported to the TAC so the agency maintains accurate audit records and can assess any privacy impact.
Which of the following scenarios represents an appropriate use of LEIN's Interstate Identification Index (III)?
Answer: Checking a suspect's criminal history prior to an interview during an active investigation
III queries are authorized for criminal justice purposes such as active investigations, not non-criminal justice employment screening without proper authorization.
What must a LEIN terminal agency do when it experiences a data breach that may have exposed CJIS information?
Answer: Immediately notify MSP-CJIC and follow the CJIS Security Policy breach notification procedures
CJIS Security Policy requires immediate notification to the state CSO (MSP-CJIC) upon discovering a security breach involving CJI.
Under LEIN policy, the 'need-to-know' principle means that LEIN information may only be accessed when:
Answer: There is a specific, articulable law enforcement purpose for the query
The need-to-know principle restricts LEIN access to situations where there is a specific, documented law enforcement justification for each query.
A LEIN message containing sensitive personal information is printed and left on a shared printer in a public area. This violates which security principle?
Answer: Physical security and media protection
Leaving printed LEIN output unsecured in accessible areas violates physical security and media protection requirements under CJIS Security Policy.
How frequently must LEIN terminal agency coordinators (TACs) ensure that operator access lists are reviewed and updated?
Answer: At least annually, or whenever personnel changes occur
TACs must review and update authorized user lists at least annually and immediately when operators leave or change roles to prevent unauthorized access.