問題文
Two tenants must run on the same physical host, and a fault in one tenant's kernel must not give it access to the other tenant's memory. Which reusable technology provides the strongest separation for that requirement?
選択肢
- The requirement points at hypervisor level separation for both tenants.
- The requirement points at operating system hardening for both tenants.
- The requirement points at container image isolation for both tenants.
- The requirement points at application runtime sandboxing for both tenants.