Which of the following are examples of system-based sandboxing implementations? (Select all that apply.)

Google Project Zero is a security research team that discovers zero-day vulnerabilities - it is an organization, not a sandboxing technology or implementation.

Google Chromium sandboxing uses OS-level process isolation to confine each renderer process, restricting its access to system resources and preventing malicious content from escaping the browser - a true system-based implementation.

The Java JVM sandbox restricts bytecode access to system resources such as the filesystem and network through a security manager model, representing a runtime-enforced, system-based sandbox.

Cisco Threat Grid is a cloud-based malware analysis and threat intelligence platform used for dynamic file detonation, not a system-level sandbox embedded in an OS or runtime environment.

The HTML5 'sandbox' attribute for iframes is a browser-enforced, system-level restriction that disables scripts, forms, and cross-origin access for embedded content, qualifying it as a system-based sandboxing feature.