352-001 · Question #149
Your firm has been awarded a contract to design a Criminal Justice Information Services Version 5.0-compliant network utilizing advanced authentication policies. Which two methods could be utilized? (
The correct answer is A. biometric B. PKI. CJIS Security Policy v5.0 mandates advanced authentication that goes beyond simple passwords, specifically identifying biometrics and PKI-based certificates as compliant methods.
Question
Your firm has been awarded a contract to design a Criminal Justice Information Services Version 5.0-compliant network utilizing advanced authentication policies. Which two methods could be utilized? (Choose two.)
Options
- Abiometric
- BPKI
- CUKI
- Dpassword
How the community answered
(27 responses)- A89% (24)
- C4% (1)
- D7% (2)
Why each option
CJIS Security Policy v5.0 mandates advanced authentication that goes beyond simple passwords, specifically identifying biometrics and PKI-based certificates as compliant methods.
Biometric authentication - such as fingerprint, iris, or facial recognition - satisfies the CJIS advanced authentication requirement because it provides a unique, possession-independent factor that cannot easily be shared or stolen.
PKI (Public Key Infrastructure) certificate-based authentication meets the CJIS advanced authentication standard by using cryptographic key pairs, providing a strong, verifiable identity mechanism beyond simple password entry.
UKI is not a recognized or defined authentication standard in cybersecurity or in the CJIS Security Policy; it does not exist as a valid authentication method.
A standalone password does not meet the CJIS v5.0 definition of advanced authentication, which requires a second factor or a method that is more resistant to compromise than a reusable password alone.
Concept tested: CJIS v5.0 advanced authentication compliant methods
Source: https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center
Topics
Community Discussion
No community discussion yet for this question.