Apple Application Analysis GIME Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   During a fraud investigation, you find a Wallet pass on a suspect's iPhone. The pass contains a barcode and a transaction history. Which data source provides the most reliable evidence of the pass's usage and associated transactions?

   • AThe pass's barcode image file stored in the Wallet app's container.
   • BThe Wallet pass's underlying .pkpass file, including its manifest and signature.
   • CThe Wallet database and related transaction logs from the payment network or the pass issuer.
   • DThe companion Apple Watch's Wallet app data, which mirrors the iPhone's pass and adds health data.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In the iOS Photos app's SQLite database (Photos.sqlite), which table stores metadata about each photo asset, such as its filename, creation date, and width/height?

   • AZKEYWORD
   • BZADDITIONALASSETATTRIBUTES
   • CZASSET
   • DZGENERICALBUM
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   You are investigating a case where a user allegedly took photos of a confidential document and then shared them via a note. Which data sources would you analyze to confirm this?

   • APhotos database for the images and Notes database for the note containing the shared images.
   • BContacts database for the recipient and Screen Time for app usage.
   • CMaps search history for the location where the photo was taken.
   • DWallet transaction history for any purchases related to the document.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   You are investigating a suspect's iPhone. The suspect claims they were not at a certain store, but Wallet shows a transaction at that store. Maps significant locations show the suspect was in the area at the time. However, the suspect argues that someone else used their phone. Which data source would best help you determine if the suspect was actually present?

   • AWallet transaction timestamp and Maps significant location entry/exit times.
   • BContacts database to see if the suspect knows anyone at the store.
   • CScreen Time data to see if the Wallet app was used at the time.
   • DApple Watch health data to see if the suspect's heart rate was elevated.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   You are analyzing a suspect's iPhone to determine if they used Maps to navigate to a specific store and then used Apple Pay to make a purchase there. Which data sources would you combine?

   • ANotes database for any notes about the store and Photos for the storefront.
   • BContacts database for the store's contact and Screen Time for Maps usage.
   • CApple Watch health data for steps taken at the store and Wallet pass details.
   • DMaps database for navigation history and Wallet transaction history for the purchase.
   Reveal Solution Discussion Select an answer first