nerdexam
Cisco

352-001 · Question #149

Your firm has been awarded a contract to design a Criminal Justice Information Services Version 5.0-compliant network utilizing advanced authentication policies. Which two methods could be utilized?…

The correct answer is A. biometric B. PKI. CJIS Security Policy v5.0 mandates advanced authentication that goes beyond simple passwords, specifically identifying biometrics and PKI-based certificates as compliant methods.

Designing Security

Question

Your firm has been awarded a contract to design a Criminal Justice Information Services Version 5.0-compliant network utilizing advanced authentication policies. Which two methods could be utilized? (Choose two.)

Options

  • Abiometric
  • BPKI
  • CUKI
  • Dpassword

How the community answered

(27 responses)
  • A
    89% (24)
  • C
    4% (1)
  • D
    7% (2)

Why each option

CJIS Security Policy v5.0 mandates advanced authentication that goes beyond simple passwords, specifically identifying biometrics and PKI-based certificates as compliant methods.

AbiometricCorrect

Biometric authentication - such as fingerprint, iris, or facial recognition - satisfies the CJIS advanced authentication requirement because it provides a unique, possession-independent factor that cannot easily be shared or stolen.

BPKICorrect

PKI (Public Key Infrastructure) certificate-based authentication meets the CJIS advanced authentication standard by using cryptographic key pairs, providing a strong, verifiable identity mechanism beyond simple password entry.

CUKI

UKI is not a recognized or defined authentication standard in cybersecurity or in the CJIS Security Policy; it does not exist as a valid authentication method.

Dpassword

A standalone password does not meet the CJIS v5.0 definition of advanced authentication, which requires a second factor or a method that is more resistant to compromise than a reusable password alone.

Concept tested: CJIS v5.0 advanced authentication compliant methods

Source: https://www.fbi.gov/services/cjis/cjis-security-policy-resource-center

Topics

#CJIS compliance#biometric authentication#PKI#advanced authentication

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice