Q. Which kernel feature allows an administrator to allocate or limit resources such as CPU, memory, and I/O bandwidth to containers?