Which technology on a host is used to isolate a running application from other applications?

A sandbox is a security mechanism for separating running programs, usually to execute untested code or untrusted programs from a potentially untrusted source without risking harm to the host system or other applications.

An application allow list dictates which applications are permitted to execute on a system, serving as an execution control rather than an isolation mechanism for running applications.

An application block list prevents specific applications from running but does not provide isolation for applications that are permitted to run.

A host-based firewall controls network communication for applications, preventing unauthorized network access, but it does not isolate an application from other processes or the file system on the local host.