What happens if the tombstone lifetime is exceeded for a deleted object in Active Directory?

When the tombstone lifetime is exceeded for a deleted object in Active Directory, the object is permanently deleted. Active Directory uses tombstones to keep track of deleted objects for a certain period, defined by the tombstone lifetime setting, which allows for the recovery of deleted objects within that timeframe. Once this period has elapsed, the tombstone is purged from the directory, and the object is no longer recoverable through the standard means that would typically allow restoration. This ensures that the directory remains clean and does not retain unnecessary data about objects that are no longer relevant.

While other options might seem plausible under different contexts, they do not apply once the tombstone lifetime has exceeded. After this period, recovery mechanisms associated with the expired tombstone are no longer valid, and the object cannot be accessed or restored in any form.