Which resource setting protects a node from a single container consuming all available memory?

1. A resources.requests.memory
2. ✓ B resources.limits.memory (correct answer)
3. C PodDisruptionBudget
4. D PriorityClass

Shortcut: The memory limit is enforced by the kernel cgroup; exceeding it triggers an OOM kill of that container. The request only influences scheduling placement.