Question 7-1 There are many ways that a network can be attacked; in turn there are many ways to safeguard your network. One way is running a vulnerability scan. The other is running a penetration test. Both are useful in their own way and used together can help keep your network safe. A vulnerability scan is a scan that is continuously runs on a network. It is looking for new vulnerabilities that may be on a network. There are many was a new vulnerability can be made in a network, a new program was installed or something has weakened security of network. This scan will give you a list of any and all new vulnerabilities that now exist in your network. A penetration test is something that should be done once a year. During this test your network gets intentionally attacked. The attacker is given permission to try to gain authorized access to system so you know where it is at its weakest and what needs to be addressed. When someone is attacking in this manner it is an ethical hack. Black box testing is when the attack has no knowledge of the internal workings of the system. This type of testing would be done in a penetration test. A gray test the attacker has some knowledge of the system they are trying to access. White box testing is when attacker has full knowledge of the system they are trying to gain access to. White box testing would be more of a vulnerability test. With both types of test being performed it will increase your chances of keeping your network safe. One type of testing would be ok but you would leave yourself open for either a long term or short term problem depending on which method is chosen. (Berkeley, 2014)

Question 7-2 WEP stands for Wired Equivalent Privacy. This is a security protocol that is specified in the IEEE Wireless Fidelity standard. It adds security to a wireless local area network that is similar to the security a wired local area network would have. It does this by encryption and being set up to require passwords to access the network. (Searchsecurity.techtarget.com, 2014) WAP stands for Wireless Application Protocol. This protocol allows wireless devices to access the internet. It does this by letting hand held devices access information that normally couldn’t be accessed due to the way web sites work as they require a click to brows the site. WAP is slowing being phased out as more mobile devices fully support HTML and other types of web design codes. (Tyson, 2014)
WPA/WPA2 is the Wi-Fi Protected Access/ Wi-Fi Protected Access 2. These are both protocols that are used for network security. The WPA uses a Temporal Key Integrity Protocol or TKIP that uses RC4 algorithm for encryption and also uses a key management and effective integrity checking. A WPA2 does all the WPA does but also supports the AES-CCMP encryption protocol. (Pcmag.com, 2014) WTLS stands for Wireless Transport Layer Security. This is the security level of the WPA. It was designed to help the issues that low bandwidth and slow processing power and provide authentication in mobile devices. WTLS allows encryption keys to be updated during secure sessions. (Searchmobilecomputing.techtarget.com, 2014)

Question 7-3 No wireless network is 100% attack proof. They all have vulnerabilities, from default settings, to user mistakes there are many ways a wireless network can be compromised. Right from opening up the wireless router it’s exposed to attack. Wireless routers are shipped in an unsecure state, so if settings are not changed you have just left your wireless network vulnerable. When you first install the router you need to check the settings. Do not allow anyone to hook up make it a private network and set up a password to connect to it. Wireless zero configuration is another way your network can be vulnerable. What this is, is when you connect to your network the information is stored so next time device is turned on or searching for service your information is sent out. It does this to reconnect to your network. While your device is looking to automatically connect an attacker can pick up those packets being sent out and then gain access to your system. To help protect against this you should set up your device to manual connection and not allow your device to send that information out automatically. Bluetooth exploits is another way your network can be vulnerable. There are different ways your Bluetooth can be used against you. One is BlueSnarfing, this is where an attacker accesses your calendar, pictures, and contacts through your Bluetooth connection. Another is BlueJacking were an attacker renames there device to something you may be connecting to so you connect with it, once you connect the attacker can send viruses and other things into your device. Keeping your Bluetooth connection off when not using it can help protect you against these attacks, also only connect to the device you know is yours. (Net-security.org, 2014)

References
Berkeley,. (2014). Retrieved 13 May 2014, from https://security.berkeley.edu/content/what-difference-between-vulnerability-scan-and-penetration-test?destination=node/195
Net-security.org,. (2014). The Ten Most Critical Wireless and Mobile Security Vulnerabilities. Retrieved 13 May 2014, from http://www.net-security.org/article.php?id=927&p=2
Pcmag.com,. (2014). WPA Definition from PC Magazine Encycl opedia. Retrieved 13 May 2014, from http://www.pcmag.com/encyclopedia/term/54879/wpa
Searchmobilecomputing.techtarget.com,. (2014). What is Wireless Transport Layer Security (WTLS)? - Definition from WhatIs.com. Retrieved 13 May 2014, from http://searchmobilecomputing.techtarget.com/definition/Wireless-Transport-Layer-Security
Searchsecurity.techtarget.com,. (2014). What is Wired Equivalent Privacy (WEP)? - Definition from WhatIs.com. Retrieved 13 May 2014, from http://searchsecurity.techtarget.com/definition/Wired-Equivalent-Privacy
Tyson, J. (2014). HowStuffWorks "How WAP Works". HowStuffWorks. Retrieved 13 May 2014, from http://computer.howstuffworks.com/wireless-internet.htm