A cloud administrator for a state government agency is tasked with giving access to the voter registration application to a government agency in another state. Only authorized officials from each…

A hybrid deployment splitting the application between public and private clouds adds architectural complexity and does not inherently provide stronger inter-agency access control than a public cloud with proper ACLs.

A community cloud is shared among multiple state government agencies beyond the two involved, which could expose the voter registration application to additional agencies that are not authorized under the stated requirements.

A public cloud deployment combined with properly configured ACLs and security access policies allows the administrator to centrally define and enforce access rules that restrict the application to only authorized officials from each state, providing both accessibility across agency boundaries and precise, enforceable access control without requiring shared private infrastructure.

Deploying to the state's private cloud and sharing authentication credentials with another agency violates least-privilege principles and creates credential management and audit risks for a sensitive government application.