Which mitigations are commonly implemented in threat modeling for telemetry platforms?

• A. Encrypting data at rest only
• B. Access controls, encryption, and monitoring
• C. Reducing audit trails
• D. Ignoring threat modeling

Answer: (B)

Threat modeling for telemetry platforms relies on layered mitigations that address access, protection of data, and visibility into activity. Access controls enforce least privilege, ensuring only authorized devices and users can access telemetry streams and related dashboards. Encryption protects data confidentiality and integrity both in transit across networks and at rest, so intercepted or stolen data remains unreadable without proper keys. Monitoring provides ongoing visibility through logs, alerts, and anomaly detection, enabling quick detection and response to potential breaches or misconfigurations. Telemetry systems handle sensitive information across complex networks, so identifying data flows and trust boundaries during threat modeling helps determine where these protections are needed most. Options that focus only on encryption at rest miss in-transit protection and access control; reducing audit trails undermine accountability and detection; and ignoring threat modeling defeats the purpose of designing robust defenses. Therefore, combining access controls, encryption, and monitoring is the standard, effective approach.