SC-300 · Question #112
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. An administrator deletes User1. You need to identify the following: - How many days after the…
The correct answer is Number of days:: 30; Role:: User administrator. This question tests knowledge of Azure AD deleted user recovery windows and the minimum RBAC role required to restore deleted users.
Question
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains a user named User1. An administrator deletes User1. You need to identify the following:
- How many days after the account of User1 is deleted can you restore
the account?
- Which is the least privileged role that can be used to restore User1?
What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:
Exhibit
Answer Area
- Number of days:30153090180
- Role:User administratorUser administratorNetwork administratorHelpdesk administratorDomain name administrator
Explanation
This question tests knowledge of Azure AD deleted user recovery windows and the minimum RBAC role required to restore deleted users.
Approach. Azure AD retains deleted user accounts in a 'soft delete' state for 30 days, during which an administrator can restore the account. After 30 days, the account is permanently deleted and cannot be recovered. The least privileged built-in Azure AD role that has permission to restore deleted users is the User Administrator role. The Global Administrator role can also restore users, but it is not the least privileged option. Roles like Helpdesk Administrator or Password Administrator do not have the ability to restore deleted users.
Concept tested. Azure AD soft-delete retention period (30 days) and the minimum privileged role (User Administrator) required to restore deleted user accounts in Azure Active Directory.
Reference. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-restore
Topics
Community Discussion
No community discussion yet for this question.