← Security+ glossary

Containerization and virtualization

A virtual machine contains its own full operating system and is isolated by a hypervisor, while a container shares the host operating system's kernel and isolates only the application. Container isolation is therefore weaker: a breach through the shared kernel can endanger other containers, whereas a virtual machine provides stronger hardware-backed isolation.

All Security+ guides →