Which of the following is supported by control groups?

Managing certificates is typically handled by security tools, PKI, or application-level configurations, not directly by Linux control groups.

While cgroups can monitor network usage, 'collect net' is not a standard or specific function supported by cgroups; network configuration and monitoring are distinct.

Cgroups can limit resource usage like CPU, memory, and I/O for processes or containers by creating hierarchical groups and assigning specific resource constraints to them.

Process isolation in containers is primarily provided by namespaces, which create a separate view of system resources for processes, distinct from cgroups which manage resource usage.