When backing up AD DS data, you cannot back up data that is older than how many days?

When backing up AD DS data, you cannot back up data that is older than how many days?

• A. 90 Days
• B. 180 Days
• C. 365 Days
• D. 120 Days

Answer: (B)

The key idea is tombstone lifetime and how it governs AD DS recovery. In Active Directory, when an object is deleted, it’s kept as a tombstone for a period to ensure deletions are replicated across all domain controllers. For a restore to be reliable, the backup you’re using must fall within that tombstone window. If the backup is older than the tombstone lifetime, there can be inconsistencies or replication conflicts when restoring, because deletions that occurred after the backup wouldn’t be reflected properly. In modern AD configurations, the maximum tombstone lifetime is 180 days, so you should not rely on backups older than 180 days for AD DS recovery. This is why the limit is 180 days.

The key idea is tombstone lifetime and how it governs AD DS recovery. In Active Directory, when an object is deleted, it’s kept as a tombstone for a period to ensure deletions are replicated across all domain controllers. For a restore to be reliable, the backup you’re using must fall within that tombstone window. If the backup is older than the tombstone lifetime, there can be inconsistencies or replication conflicts when restoring, because deletions that occurred after the backup wouldn’t be reflected properly. In modern AD configurations, the maximum tombstone lifetime is 180 days, so you should not rely on backups older than 180 days for AD DS recovery. This is why the limit is 180 days.