The retention period for Azure Active Directory (Azure AD) sign-in logs is dependent on the Azure AD license. For tenants with Azure AD Premium P1 or P2 licenses, which are typically assumed for the feature scope of the SC-300 exam, the sign-in logs are retained for 30 days. For tenants with an Azure AD Free license, the retention period is 7 days. Since 7 days is not an option and 30 days corresponds to the premium licenses that enable comprehensive log review, it is the correct answer. Longer retention requires exporting the logs to another service like Azure Monitor or a storage account.

A. 14 days: This is not a standard retention period for any Azure AD activity logs.

C. 90 days: This is the retention period for Audit logs in Azure AD Premium P1/P2 tenants, not for sign-in logs.

D. 365 days: This retention period is not available natively within Azure AD. It can be achieved by archiving logs to an Azure storage account, but it is not the default duration Azure AD stores the data.

1. Microsoft Learn. "How long does Azure AD store reporting data?". Azure Active Directory documentation. Accessed October 2023. In the "Activity logs" section

the table explicitly states that for the "Sign-ins" report type with an "Azure AD P1 or P2" license

the retention period is "30 Days".

Reference: https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/reference-reports-data-retention (See the table under the "Activity logs" section).

2. Microsoft Learn. "What are Azure Active Directory reports?". Azure Active Directory documentation. Accessed October 2023. This document discusses the different reports available and notes that "If you have an Azure AD Premium P1 or Azure AD P2 license

you can retain the audit logs and sign-in logs for up to 30 days."

Reference: https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/overview-reports#what-azure-ad-license-do-you-need-to-access-activity-logs (See the "Activity log retention" section).