A new service request asks for all members of the finance department to have access to the accounting department's file server VMs on the private cloud environment. Which of the following is the MOST

Creating separate file server VMs for the finance department with two-way replication from the accounting VMs ensures finance users get synchronized, up-to-date access without altering the accounting department's existing VM permissions or access control lists. This approach maintains departmental boundaries in the private cloud by keeping each department's VM access scope independent, which aligns with the principle of least privilege and separation of duties. It also scales cleanly as the finance department grows without requiring repeated changes to accounting's security configuration.

Manually adding each finance user to the accounting file server VM access lists is operationally inefficient and violates departmental access boundary principles in a private cloud.

Implementing SSO and two-factor authentication addresses identity and authentication security but does not fulfill the service request to grant file server resource access.

Creating a group for finance to directly access the accounting department's file server VMs modifies accounting's access controls, which may violate separation-of-duties policies and expose accounting data beyond its intended scope.