Correct Answer : namespaces
Explanation :
Namespaces make the isolation of the process that runs a Docker container possible.
Control groups are what make it possible to limit the amount of CPU time and memory allocated to a given container.
Security groups are typically associated with AWS configurations, and Kubernetes is a container orchestration tool.