
Explanation:
Box 1: Yes
Key Vault Administrator can perform all data plane operations on a key vault.
And purge protection is disabled for KeyVault2.
NB: Purge protection is an optional Key Vault behavior and is not enabled by default.
Do not mismatch with soft-delete
Box 2: No
We are still in the Purge protection remaining period.
NB: Also the Key Vault contributor role doesn't allow to get access to certificate Box 3: No We are still in the Purge protection remaining period.
Even if the Certificate Officer role allow to get access to certificate