Courseiva
mediumMultiple Choice

220-1102 Practice Question: A user on Windows 11 is trying to install a new…

A user on Windows 11 is trying to install a new application, but receives the error 'Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.' The user is a local administrator. What is the most likely cause?

⚠ Common exam trap

The trap is taking the error message literally — 'you may not have the appropriate permissions' sounds like an NTFS or UAC issue, but the real cause is the Mark-of-the-Web, and candidates who focus on ACLs or UAC pick the wrong answer.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The file has been blocked by Windows because it was downloaded from the internet.

When a file is downloaded from the internet, Windows attaches a Zone.Identifier alternate data stream marking it as originating from the 'Internet' zone. Even as a local administrator, the user cannot execute or install it until the block is removed via the file's Properties dialog ('Unblock' checkbox) or PowerShell's Unblock-File cmdlet. The error message about permissions is misleading — it is a Mark-of-the-Web restriction, not an NTFS ACL problem.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    The file is corrupted and needs to be re-downloaded.

    Why it's wrong here

    File corruption typically manifests as errors indicating an invalid executable format, such as 'not a valid Win32 application,' or data integrity failures like CRC errors during extraction. A 'cannot access' message, however, points towards a system-level security restriction or a permission issue preventing the operating system from interacting with the file, rather than a problem with the file's internal data integrity.

  • ✗

    User Account Control (UAC) is blocking the installation.

    Why it's wrong here

    User Account Control (UAC) is designed to prompt for administrative consent before an application can make system-level changes, presenting a distinct elevation dialog, often with a dimmed desktop. It does not typically generate a 'cannot access' error message that prevents the initial launch attempt. An administrator user would simply be prompted to approve the UAC elevation, not blocked from accessing the file itself.

  • ✓

    The file has been blocked by Windows because it was downloaded from the internet.

    Why this is correct

    Windows applies a security measure known as the 'Mark-of-the-Web' (MotW) to files downloaded from the internet, assigning them a 'Zone Identifier' alternate data stream. This security feature prevents immediate execution or access until the user explicitly 'unblocks' the file via its Properties dialog box. This restriction often manifests as a 'cannot access the specified device, path, or file' error, even for administrative users, making 'Unblock' the common resolution.

  • ✗

    The user does not have 'Read & Execute' permissions on the file.

    Why it's wrong here

    Local administrators generally possess extensive NTFS permissions, including 'Read & Execute,' on most files within the system, especially newly downloaded ones. A direct denial of these fundamental permissions for an administrator on a file would indicate a highly unusual and specific misconfiguration of the file's security descriptor. This scenario is far less common for downloaded files than the default 'Mark-of-the-Web' security block applied by Windows.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

Go deeper

Related to this question

About these practice questions

One of 687 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official CompTIA exam blueprint

This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.