Apple Application Analysis GIME Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   You are investigating whether a user exceeded their daily screen time limit on a specific app. Which data source provides the most direct evidence of app usage duration?

   • AThe Screen Time database's usage records for that app.
   • BThe app's own internal analytics or crash logs.
   • CThe device's battery usage statistics.
   • DThe user's Notes app entries about their screen time.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   During a forensic examination of an iPhone, you locate the Contacts app's SQLite database. Which table in that database would most directly contain the contact names and phone numbers you need to extract?

   • AZABCDRECORD
   • BABPerson
   • CZABCDPHONENUMBER
   • DZABCDCONTACT
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   You are investigating a missing person case. The person's iPhone contains notes with possible clues and Maps search history. Which approach would best help you reconstruct their last known activities?

   • AAnalyze the Contacts database for recent calls and the Wallet for transactions.
   • BAnalyze the Notes database for content and the Maps database for search history and routes.
   • CAnalyze Screen Time data for app usage patterns and Photos for recent photos.
   • DAnalyze Apple Watch health data for activity and heart rate.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   During a corporate investigation, you need to determine if an employee used their iPhone to share confidential information via the Notes app. Which data source would provide the most relevant evidence?

   • AScreen Time data, which shows how long the Notes app was used.
   • BNotes database, including note content, creation dates, and any sharing metadata.
   • CWallet transaction history, which may show purchases of a premium Notes subscription.
   • DContacts database, which may contain the recipient's information.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A health insurance company is investigating a claim where the policyholder claims to have been bedridden for a week, but there is suspicion of physical activity. You have access to the policyholder's iPhone and Apple Watch data. Which data source would provide the most objective evidence of physical activity during that week?

   • AMaps significant locations, which may show travel to gyms or parks.
   • BApple Watch health data, including step count, heart rate, and workout records.
   • CPhotos metadata, which may include timestamps of outdoor photos.
   • DScreen Time data, which shows app usage patterns.
   Reveal Solution Discussion Select an answer first