352-001 · Question #149
Your firm has been awarded a contract to design a Criminal Justice Information Services Version 5.0-compliant network utilizing advanced authentication policies. Which two methods could be utilized?…
The correct answer is A. biometric B. PKI. CJIS Security Policy v5.0 mandates advanced authentication that goes beyond simple passwords, specifically identifying biometrics and PKI-based certificates as compliant methods.
Question
Your firm has been awarded a contract to design a Criminal Justice Information Services Version 5.0-compliant network utilizing advanced authentication policies. Which two methods could be utilized? (Choose two.)
Options
- Abiometric
- BPKI
- CUKI
- Dpassword
How the community answered
(27 responses)- A89% (24)
- C4% (1)
- D7% (2)
Why each option
CJIS Security Policy v5.0 mandates advanced authentication that goes beyond simple passwords, specifically identifying biometrics and PKI-based certificates as compliant methods.
Biometric authentication - such as fingerprint, iris, or facial recognition - satisfies the CJIS advanced authentication requirement because it provides a unique, possession-independent factor that cannot easily be shared or stolen.
PKI (Public Key Infrastructure) certificate-based authentication meets the CJIS advanced authentication standard by using cryptographic key pairs, providing a strong, verifiable identity mechanism beyond simple password entry.
UKI is not a recognized or defined authentication standard in cybersecurity or in the CJIS Security Policy; it does not exist as a valid authentication method.
A standalone password does not meet the CJIS v5.0 definition of advanced authentication, which requires a second factor or a method that is more resistant to compromise than a reusable password alone.
Concept tested: CJIS v5.0 advanced authentication compliant methods
Source: https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center
Topics
Community Discussion
No community discussion yet for this question.