mediumMultiple ChoiceObjective-mapped
220-1202 Practice Question: That after a recent Windows update, they can no…
A user reports that after a recent Windows update, they can no longer install a legacy application that requires write access to the Program Files folder. The user is a local administrator. What Windows security setting is most likely blocking the installation?
⚠ Common exam trap
CompTIA often tests the misconception that local administrators always run with full administrative privileges, but UAC's default behavior means even admins operate with a filtered token until they explicitly elevate, causing legacy installers to fail when they attempt to write to protected folders like Program Files.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
User Account Control (UAC)
User Account Control (UAC) is the Windows security feature that prompts for consent or credentials before allowing actions that require administrative privileges, even for local administrators. By default, UAC virtualizes write attempts to protected system locations like Program Files, redirecting them to a per-user virtual store, which can cause legacy applications that expect direct write access to fail. Disabling UAC or running the installer with explicit administrative rights (e.g., right-click 'Run as administrator') typically resolves the issue.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
BitLocker Drive Encryption
Why it's wrong here
BitLocker Drive Encryption operates at the disk encryption layer, protecting data confidentiality by rendering it unreadable without the correct key. Its primary function is to ensure data security when a device is lost or stolen, not to manage file system permissions or user privileges for software installation. Therefore, BitLocker would not directly prevent a legitimate application from installing by generating a "permission denied" error, as its function is unrelated to execution rights or access control lists.
- ✓
User Account Control (UAC)
Why this is correct
User Account Control (UAC) is a core Windows security feature designed to prevent unauthorized changes to the operating system by requiring explicit consent for actions that could affect system integrity. When a user, even an administrator, attempts to install software or make system-level changes, UAC prompts for elevation, displaying a "permission denied" or "administrator privileges required" message if elevation is not granted. A recent Windows update could have tightened UAC policies or reset them to a more secure default, causing previously unprompted installations to now trigger UAC.
- ✗
Windows Defender Firewall
Why it's wrong here
Windows Defender Firewall primarily functions as a network security component, controlling inbound and outbound network traffic based on predefined rules. Its purpose is to prevent unauthorized access to the system from external networks or to block malicious outgoing connections. The firewall does not regulate local file system access, user permissions for installing applications, or the execution of local programs, making it irrelevant to a "permission denied" error during a local software installation.
- ✗
Group Policy Software Restrictions
Why it's wrong here
Group Policy Software Restriction Policies (SRPs) are used by administrators to control which software programs are allowed to run on a system. While SRPs can prevent specific applications from executing or installing, they typically manifest as a "This program is blocked by group policy" message, not a generic "permission denied" error during installation of a legitimate application. Furthermore, SRPs are usually configured by an administrator and are less likely to be spontaneously altered by a standard Windows update to block legitimate software.
Visual reference
Go deeper
Related to this question
Learn chapter
Introduction to Windows Operating Systems
Key term
User Account Control
User Account Control (UAC) is a Windows security feature that prevents unauthorized changes to the operating system by prompting for permission before allowing actions that affect system settings or installed programs.
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.