LinuC Level 3 Platform Specialist 3PS-100 — PracticeTrial (no sign-up)

An organization must run untrusted container workloads while reducing their direct system-call exposure to the host kernel compared with a conventional OCI runtime. It wants a userspace application kernel to handle system calls rather than booting a full guest OS. Which runtime is the best match?