nerdexam
Cisco

352-001 · Question #149

Your firm has been awarded a contract to design a Criminal Justice Information Services Version 5.0-compliant network utilizing advanced authentication policies. Which two methods could be utilized? (

The correct answer is A. biometric B. PKI. CJIS Security Policy v5.0 mandates advanced authentication that goes beyond simple passwords, specifically identifying biometrics and PKI-based certificates as compliant methods.

Designing Security

Question

Your firm has been awarded a contract to design a Criminal Justice Information Services Version 5.0-compliant network utilizing advanced authentication policies. Which two methods could be utilized? (Choose two.)

Options

  • Abiometric
  • BPKI
  • CUKI
  • Dpassword

How the community answered

(27 responses)
  • A
    89% (24)
  • C
    4% (1)
  • D
    7% (2)

Why each option

CJIS Security Policy v5.0 mandates advanced authentication that goes beyond simple passwords, specifically identifying biometrics and PKI-based certificates as compliant methods.

AbiometricCorrect

Biometric authentication - such as fingerprint, iris, or facial recognition - satisfies the CJIS advanced authentication requirement because it provides a unique, possession-independent factor that cannot easily be shared or stolen.

BPKICorrect

PKI (Public Key Infrastructure) certificate-based authentication meets the CJIS advanced authentication standard by using cryptographic key pairs, providing a strong, verifiable identity mechanism beyond simple password entry.

CUKI

UKI is not a recognized or defined authentication standard in cybersecurity or in the CJIS Security Policy; it does not exist as a valid authentication method.

Dpassword

A standalone password does not meet the CJIS v5.0 definition of advanced authentication, which requires a second factor or a method that is more resistant to compromise than a reusable password alone.

Concept tested: CJIS v5.0 advanced authentication compliant methods

Source: https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center

Topics

#CJIS compliance#biometric authentication#PKI#advanced authentication

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice