In secure software design and development, what is meant by attack surface reduction?

A. minimizing exposed entry points, services and interfaces attackers can abuse B. opening all ports C. publishing private keys D. removing all logging