CREST Practitioner Security Analyst (CPSA) Practice

What is Yersinia primarily known for testing?

1. Layer 2 protocols

2. Application layer protocols

3. Network security vulnerabilities

4. Firewall configurations

The correct answer is: Layer 2 protocols

Yersinia is primarily known for testing Layer 2 protocols, such as Spanning Tree Protocol (STP), Dynamic Host Configuration Protocol (DHCP), and others that operate at the data link layer of the OSI model. It is a network attack tool designed to exploit vulnerabilities in these lower-layer protocols to demonstrate potential weaknesses and security flaws. By targeting Layer 2, Yersinia allows security professionals to evaluate how susceptible their network infrastructure is to various types of attacks like VLAN hopping and man-in-the-middle attacks, thereby providing insights into improving network security at its foundational level. Understanding how these protocols function and securing them is crucial for maintaining a robust network environment.