A financial services company runs its workloads on a public IaaS provider that uses shared physical hosts to serve multiple customers. During a threat-modeling session, the security architect raises concern that a compromised virtual machine belonging to another tenant on the same physical server could potentially access their VM's memory or data. Which cloud building-block technology and associated risk is the architect describing, and what control primarily mitigates it?