What is the most "secure" blocking protocol, "UDP or TCP", "IP" or using both?

What protocol do i need to use if i want to completely block a software from making any kind of connection?

Ive always blocked via “advanced settings” and used protocol: “UDP or TCP” but just found out that the basic “block application” setting uses “IP” which made me confused. ???

Protocol should be set to IP as that blocks at the network layer and all protocols at and above it.

In CIS terms: IP = TCP, UDP and ICMP.

Thanks for explaining, I was unable to find the difference in the user guide.