What term describes closing all routes of attack into an organization's systems?

• A. Defense in depth
• B. Comprehensive security
• C. Total security
• D. Access control

Answer: (B)

Closing all routes of attack into an organization’s systems is best described by an all-encompassing security approach. Comprehensive security captures the idea of protecting every surface and entry point—people, processes, technology, and physical environments—through a coordinated set of policies, controls, monitoring, and governance. It implies assessing and securing the entire attack surface, not just one aspect, and continuously improving defenses to reduce exposure.

Access control focuses narrowly on who can access specific resources, which is only one piece of the puzzle. Defense in depth is a solid strategy that emphasizes layered defenses, but the term doesn’t by itself denote closing every possible route; it’s about multiple defenses at different layers. Total security is not a standard term with a precise meaning in security practice and can be vague.