A-Level CIE Computer Science: Network Fundamentals Exam Essentials | A-Level CIE 计算机：网络基础考点精讲

📚 A-Level CIE Computer Science: Network Fundamentals Exam Essentials | A-Level CIE 计算机：网络基础考点精讲

Computer networks form the backbone of modern digital communication, enabling devices to exchange data seamlessly across the globe. This comprehensive guide focuses on the essential topics you need to master for the A-Level CIE Computer Science syllabus, including network types, topologies, protocols, addressing, and security. Each concept is distilled into clear, exam-ready explanations with paired English and Chinese paragraphs to reinforce understanding. Use this resource to consolidate your knowledge and approach your revision with confidence.

计算机⽹络是现代数字通信的⻣⼲，它使设备能够在全球范围内⽆缝交换数据。本指南聚焦于 A-Level CIE 计算机科学⼤纲中你必须掌握的关键主题，包括⽹络类型、拓扑结构、协议、寻址和安全性。每个概念都以清晰、备考友好的⽅式提炼，并提供对应的英中段落以加深理解。利⽤这份材料巩固知识，⾃信地⾯对你的复习与考试。

1. Types of Networks | 网络类型

A Local Area Network (LAN) connects computers within a limited geographical area, such as a home, school, or office building, typically using Ethernet or Wi-Fi. LANs offer high data transfer rates and low latency, making them ideal for resource sharing like printers and file servers.

局域网 (LAN) 将有限地理区域内的计算机连接起来，例如家庭、学校或办公楼，通常使⽤以太⽹或 Wi-Fi。局域⽹提供⾼数据传输速率和低延迟，使其成为共享打印机和⽂件服务器等资源的理想选择。

A Wide Area Network (WAN) spans a large geographical area, often a country or continent, and relies on leased telecommunications lines or satellite links. The internet is the largest example of a WAN, connecting countless LANs worldwide.

⼴域⽹ (WAN) 覆盖⼤⽚地理区域，通常是⼀个国家或⼤洲，依赖于租⽤的电信线路或卫星链路。互联⽹就是最⼤的 WAN 示例，它将全球⽆数局域⽹连接在⼀起。

A Metropolitan Area Network (MAN) falls between LAN and WAN in scale, typically covering a city or large campus. MANs are often used by municipal authorities or large organisations to interconnect multiple LANs across a citywide area.

城域⽹ (MAN) 的规模介于 LAN 和 WAN 之间，通常覆盖⼀个城市或⼤型园区。市政府或⼤型机构常使⽤ MAN 将城市范围内的多个局域⽹互连起来。

A Personal Area Network (PAN) is a small-scale network centred around an individual, using technologies such as Bluetooth or USB. PANs enable communication between personal devices like smartphones, laptops, and wearable tech within a range of a few metres.

个⼈区域⽹ (PAN) 是围绕个⼈构建的⼩规模⽹络，使⽤蓝⽛或 USB 等技术。PAN 实现智能⼿机、笔记本电脑和可穿戴设备等个⼈设备之间在数⽶范围内的通信。

2. Network Topologies | 网络拓扑结构

In a star topology, all devices are connected to a central switch or hub. If one link fails, only that device is affected, making it robust; however, the central device is a single point of failure.

在星型拓扑中，所有设备都连接到中央交换机或集线器。如果⼀条链路出现故障，只有该设备会受影响，因此可靠性⾼；然⽽中央设备是单点故障点。

The bus topology uses a single backbone cable to which all devices connect via terminators at both ends. It is simple and cheap but suffers from data collisions and limited scalability, and a break in the backbone disables the whole network.

总线拓扑使⽤单⼀主⼲电缆，所有设备通过两端端接器连接到该电缆。它简单且成本低，但存在数据冲突和可扩展性有限的缺点，主⼲断裂会导致整个⽹络瘫痪。

A ring topology connects each device to exactly two others, forming a circular data path. Data travels in one direction, reducing collisions, but a single break in the ring can bring down the network unless a dual-ring configuration is used.

环形拓扑将每个设备与其左右两个设备相连，形成环形数据路径。数据单向传输，减少了冲突，但环中任⼀断点都会导致⽹络瘫痪，除⾮使⽤双环结构。

In a mesh topology, every device is connected to every other device, providing excellent redundancy and reliability. Full mesh is expensive due to cabling, so partial mesh is often used where only critical nodes have multiple connections.

在⽹状拓扑中，每个设备都与所有其他设备相连，提供极佳冗余性和可靠性。全⽹状由于布线成本⾼昂，通常采⽤部分⽹状，仅关键节点拥有多条连接。

3. Networking Devices | 网络设备

A network switch operates at the data link layer and forwards frames based on MAC addresses. It creates a separate collision domain for each port, improving efficiency, and learns the MAC address table dynamically.

⽹络交换机⼯作在数据链路层，基于 MAC 地址转发帧。它为每个端⼝创建独⽴的冲突域，提⾼效率，并动态学习 MAC 地址表。

A router operates at the network layer and forwards packets based on IP addresses using routing tables. Routers connect different networks, such as a home LAN to the internet, and can implement NAT and firewall functions.

路由器⼯作在⽹络层，利⽤路由表根据 IP 地址转发数据包。路由器连接不同⽹络，例如家庭局域⽹到互联⽹，并可实施 NAT 和防⽕墙功能。

A hub is a simple physical layer device that broadcasts incoming data to all ports, creating one large collision domain. Hubs are largely obsolete, replaced by switches due to their inefficiency.

集线器是简单的物理层设备，将接收到的数据向所有端⼝⼴播，形成⼀个⼤的冲突域。集线器⼤多已被淘汰，因为其效率低下，被交换机所取代。

A bridge connects two network segments at the data link layer, filtering traffic based on MAC addresses to reduce collision domains. Bridges are now mainly used in wireless mesh networks or as virtual functions in modern hardware.

⽹桥在数据链路层连接两个⽹络段，根据 MAC 地址过滤流量以减少冲突域。现在⽹桥主要⽤于⽆线⽹状⽹或作为现代硬件中的虚拟功能。

A gateway translates between different protocol suites or network architectures, operating at any layer of the OSI model. For example, an email gateway converts SMTP messages to a proprietary messaging format.

⽹关在不同协议栈或⽹络架构之间进⾏转换，可⼯作在 OSI 模型的任意层。例如，电⼦邮件⽹关将 SMTP 消息转换为专有消息格式。

4. OSI Model and TCP/IP Model | OSI 模型与 TCP/IP 模型

The OSI (Open Systems Interconnection) model is a conceptual framework with seven layers: Physical, Data Link, Network, Transport, Session, Presentation, and Application. Each layer serves the one above it, with data encapsulated as it descends the stack.

OSI（开放系统互连）模型是⼀个七层概念框架：物理层、数据链路层、⽹络层、传输层、会话层、表⽰层和应⽤层。每⼀层为上层服务，数据下楼时进⾏封装。

The TCP/IP model is a streamlined four-layer protocol suite used in the internet: Application, Transport, Internet, and Network Access. It maps roughly to OSI layers, with the Application layer covering OSI’s Session, Presentation, and Application.

TCP/IP 模型是互联⽹使⽤的简化四层协议栈：应⽤层、传输层、⽹际层和⽹络接⼝层。它⼤致对应 OSI 层，其中应⽤层涵盖了 OSI 的会话、表⽰和应⽤层。

OSI Layer	TCP/IP Layer	Function Examples
7. Application	Application	HTTP, FTP, SMTP
6. Presentation		Encryption, ASCII/Unicode conversion
5. Session		Session establishment, synchronisation
4. Transport	Transport	TCP, UDP
3. Network	Internet	IP, ICMP
2. Data Link	Network Access	Ethernet, Wi-Fi framing
1. Physical	Network Access	Cables, voltages, radio frequencies

Encapsulation is the process of adding headers (and sometimes trailers) at each layer as data moves down the stack. The resulting unit is a frame at Data Link, a packet at Network, and a segment at Transport (TCP) or datagram (UDP).

封装是数据沿协议栈向下传递时，每层添加报头（有时还有报尾）的过程。产⽣的单元在数据链路层是帧，在⽹络层是数据包，在传输层是段 (TCP) 或数据报 (UDP)。

5. IP Addresses and MAC Addresses | IP 地址与 MAC 地址

An IPv4 address is a 32-bit number typically written in dotted-decimal notation, e.g., 192.168.1.10. It identifies a device on a network at the network layer and consists of a network portion and a host portion determined by the subnet mask.

IPv4 地址是⼀个 32 位数字，通常以点分⼗进制表⽰，如 192.168.1.10。它在⽹络层标识⼀个设备，由⽹络部分和主机部分组成，这由⼦⽹掩码决定。

A subnet mask, such as 255.255.255.0, defines which bits of an IP address represent the network. The CIDR notation /24 indicates that the first 24 bits are the network prefix. The formula for available host addresses is:

⼦⽹掩码（如 255.255.255.0）定义了 IP 地址中哪些位代表⽹络。CIDR 标记 /24 表⽰前 24 位是⽹络前缀。可⽤主机地址的计算公式为：

Number of hosts = 2⁽³²⁻ⁿ⁾ – 2

This formula subtracts two because the network address (all host bits zero) and broadcast address (all host bits one) are reserved. For a /24 network, this gives 2⁸ – 2 = 254 usable addresses.

该公式减去 2，因为⽹络地址（主机位全零）和⼴播地址（主机位全⼀）被保留。对于 /24 ⽹络，结果为 2⁸ – 2 = 254 个可⽤地址。

A MAC (Media Access Control) address is a 48-bit hardware identifier burned into a network interface card, usually shown as six pairs of hexadecimal digits (e.g., 00:1A:2B:3C:4D:5E). It operates at the data link layer for local delivery of frames.

MAC（介质访问控制）地址是烧录在⽹络接⼝卡中的 48 位硬件标识符，通常表⽰为六组⼗六进制数字（如 00:1A:2B:3C:4D:5E）。它在数据链路层⽤于帧的本地传递。

IPv6 was developed to overcome IPv4 address exhaustion, using 128-bit addresses written as eight groups of four hexadecimal digits separated by colons, e.g., 2001:0db8:85a3::8a2e:0370:7334. It simplifies header processing and supports auto-configuration.

IPv6 为克服 IPv4 地址耗尽⽽开发，使⽤ 128 位地址，以冒号分隔的⼋组四位⼗六进制数字表⽰，如 2001:0db8:85a3::8a2e:0370:7334。它简化了报头处理并⽀持⾃动配置。

6. Network Protocols | 网络协议

HTTP (HyperText Transfer Protocol) is the foundation of data communication on the web, using a request-response model. A client sends a GET or POST request, and a server returns a status code with content. HTTPS encrypts this communication using TLS/SSL.

HTTP（超⽂本传输协议）是 Web 数据通信的基础，使⽤请求-响应模型。客户端发送 GET 或 POST 请求，服务器返回状态码和内容。HTTPS 使⽤ TLS/SSL 对通信进⾏加密。

FTP (File Transfer Protocol) is used to transfer files between a client and a server, often using separate control and data connections. It can operate in active or passive mode but lacks built-in encryption; SFTP and FTPS provide secure alternatives.

FTP（⽂件传输协议）⽤于在客户端和服务器之间传输⽂件，通常使⽤独⽴的控制和数据连接。它可以采⽤主动或被动模式，但缺乏内置加密；SFTP 和 FTPS 提供了安全的替代⽅案。

SMTP (Simple Mail Transfer Protocol) handles the sending of emails from a client to a mail server and between mail servers. It uses TCP port 25 or 587. POP3 and IMAP are used by a client to retrieve emails from a mail server.

SMTP（简单邮件传输协议）处理邮件从客户端到邮件服务器以及邮件服务器之间的发送。它使⽤ TCP 端⼝ 25 或 587。POP3 和 IMAP 是客户端从邮件服务器获取邮件使⽤的协议。

POP3 (Post Office Protocol version 3) downloads emails to a single device and typically deletes them from the server, whereas IMAP (Internet Message Access Protocol) keeps messages on the server, allowing multi-device synchronisation.

POP3（邮局协议第三版）将邮件下载到单⼀设备并通常从服务器删除，⽽ IMAP（互联⽹消息访问协议）将邮件保留在服务器上，允许跨设备同步。

TCP (Transmission Control Protocol) provides reliable, connection-oriented delivery with error checking and flow control. It uses a three-way handshake (SYN, SYN-ACK, ACK) to establish a session. UDP (User Datagram Protocol) is connectionless and lightweight, suitable for streaming and DNS.

TCP（传输控制协议）提供可靠的、⾯向连接的传递，具有错误检查和流量控制。它使⽤三次握⼿（SYN、SYN-ACK、ACK）建⽴会话。UDP（⽤户数据报协议）是⾯向⽆连接的轻量级协议，适⽤于流媒体和 DNS。

7. Domain Name System (DNS) | 域名系统 (DNS)

DNS translates human-friendly domain names (e.g., http://www.example.com) into machine-readable IP addresses. It operates as a distributed, hierarchical database with root servers, top-level domain (TLD) servers, and authoritative name servers.

DNS 将⼈类可读的域名（如 http://www.example.com）转换为机器可读的 IP 地址。它以分布式、分层数据库的形式运⾏，包括根服务器、顶级域 (TLD) 服务器和权威名称服务器。

A domain name is resolved recursively: a local DNS resolver contacts a root server, which refers it to a TLD server; the TLD server points to the authoritative server for the domain. Caching at each level speeds up subsequent lookups.

域名解析通过递归⽅式进⾏：本地 DNS 解析器联系根服务器，根服务器将其引向 TLD 服务器；TLD 服务器再指向该域的权威服务器。各级缓存可加快后续查询速度。

DNS records include A (IPv4 address), AAAA (IPv6), CNAME (canonical name alias), MX (mail exchange), and NS (name server). An A record for ‘www’ might point to 192.0.2.1.

DNS 记录包括 A（IPv4 地址）、AAAA（IPv6）、CNAME（规范名称别名）、MX（邮件交换）和 NS（名称服务器）。例如 ‘www’ 的 A 记录可能指向 192.0.2.1。

DNS operates primarily over UDP on port 53 for queries, as the low overhead suits short request-response exchanges. For large responses (exceeding 512 bytes) or zone transfers, it can use TCP.

DNS 查询主要在端⼝ 53 上使⽤ UDP，因为低开销适合简短的请求-响应交换。对于⼤量响应（超 512 字节）或区域传送，它可以使⽤ TCP。

8. Client-Server and Peer-to-Peer Networks | 客户端-服务器与对等网络

In a client-server model, a powerful central server provides resources and services, such as web pages, files, or email, while clients request those services. This centralisation simplifies administration and access control but introduces a single point of failure and can be costly to scale.

在客户端-服务器模型中，功能强⼤的中央服务器提供资源和服务，如⽹页、⽂件或邮件，⽽客户端请求这些服务。这种集中化简化了管理和访问控制，但引⼊了单点故障，且扩展成本较⾼。

In a peer-to-peer (P2P) network, each node acts as both client and server, sharing resources directly. P2P is highly scalable and fault-tolerant because there is no central server, but security and resource management become more challenging.

在对等 (P2P) ⽹络中，每个节点既充当客户端也充当服务器，直接共享资源。P2P 可扩展性强且容错性⾼，因为没有中央服务器，但安全性和资源管理变得更加困难。

Typical applications of client-server architecture include web hosting, online banking, and multiplayer gaming servers. P2P is widely used in file sharing (BitTorrent), blockchain networks, and VoIP (Skype).

客户端-服务器架构的典型应⽤包括⽹站托管、在线银⾏和多⼈游戏服务器。P2P ⼴泛⽤于⽂件共享 (BitTorrent)、区块链⽹络和 VoIP (Skype)。

Hybrid models exist, such as BitTorrent trackers that act as a central directory while actual file transfers are peer-to-peer. This balances efficiency with coordination.

还存在混合模型，例如 BitTorrent 跟踪器充当中央⽬录，⽽实际⽂件传输是对等的。这在效率与协调之间取得了平衡。

9. Network Security | 网络安全

A firewall monitors incoming and outgoing network traffic based on predetermined security rules. It can be hardware or software-based and operates at the packet level (packet filtering) or application level (proxy firewall), blocking unauthorised access.

防⽕墙根据预设安全规则监控进出的⽹络流量。它可以是硬件或软件，⼯作在数据包级（包过滤）或应⽤级（代理防⽕墙），阻⽌未经授权的访问。

Encryption scrambles data using algorithms and keys, ensuring confidentiality. Symmetric encryption uses the same key for both encryption and decryption (e.g., AES), whereas asymmetric encryption uses a public/private key pair (e.g., RSA). HTTPS depends on asymmetric encryption to establish a session key, then uses symmetric encryption for bulk data.

加密使⽤算法和密钥对数据进⾏乱序处理，确保机密性。对称加密使⽤同⼀密钥进⾏加密和解密（如 AES），⽽⾮对称加密使⽤公钥/私钥对（如 RSA）。HTTPS 依赖⾮对称加密建⽴会话密钥，然后使⽤对称加密传输⼤量数据。

A proxy server acts as an intermediary between a user and the internet, masking the user’s IP address and providing content filtering and caching. Reverse proxies sit in front of web servers to handle incoming requests, enhancing security and load balancing.

代理服务器充当⽤户与互联⽹之间的中介，隐藏⽤户 IP 地址并提供内容过滤和缓存。反向代理位于 Web 服务器前⾯，处理⼊⼝请求，增强安全性和负载均衡。

Authentication methods include passwords, biometrics, and two-factor authentication (2FA), which combines something you know (password) with something you have (token) or are (fingerprint). This mitigates risks of credential theft.

⾝份验证⽅法包括密码、⽣物识别和双因素认证 (2FA)，2FA 结合了你知道的（密码）和你拥有的（令牌）或你是什么（指纹）。这降低了凭证被盗的⻛险。

10. Cloud Technologies | 云技术

Cloud computing delivers on-demand computing resources over the internet, allowing scalable and flexible storage, processing, and services. The three main service models are Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).

云计算通过互联⽹提供按需计算资源，实现可扩展且灵活的存储、处理和服务。三⼤主要服务模型是基础设施即服务 (IaaS)、平台即服务 (PaaS) 和软件即服务 (SaaS)。

IaaS provides virtualised computing resources like virtual machines, storage, and networks over the internet. Users manage the operating system and applications, while the provider handles the physical infrastructure. Examples include Amazon EC2 and Microsoft Azure VMs.

IaaS 提供虚拟化计算资源，如虚拟机、存储和⽹络。⽤户管理操作系统和应⽤程序，提供商处理物理基础设施。例如 Amazon EC2 和 Microsoft Azure 虚拟机。

PaaS offers a platform with tools and services for developers to build, test, and deploy applications without worrying about underlying hardware or software updates. Examples are Google App Engine and Heroku.

PaaS 提供带有⼯具和服务的平台，供开发者构建、测试和部署应⽤程序，⽆需担⼼底层硬件或软件更新。例如 Google App Engine 和 Heroku。

SaaS delivers fully functional applications over the internet on a subscription basis. Users access software through a web browser without installation. Examples include Google Workspace, Microsoft 365, and Salesforce.

SaaS 通过互联⽹以订阅⽅式提供完整功能的应⽤程序。⽤户通过 Web 浏览器访问软件，⽆需安装。例如 Google Workspace、Microsoft 365 和 Salesforce。

Cloud storage allows data to be saved remotely and accessed from any location, offering scalability and disaster recovery. It can be object-based (e.g., Amazon S3), file-based, or block-based, and is often used for backup and collaboration.

云存储允许数据远程保存并随处访问，提供可扩展性和灾难恢复。它可以是基于对象（如 Amazon S3）、基于⽂件或基于块的，通常⽤于备份和协作。

Public cloud resources are shared among multiple organisations, private cloud is dedicated to a single organisation, and hybrid cloud combines both, offering flexibility and optimising costs.

公有云资源在多个组织之间共享，私有云专⽤于单个组织，混合云结合两者，提供灵活性并优化成本。

Published by TutorHao | Computer Science Revision Series | aleveler.com

更多咨询请联系16621398022（同微信）

A-Level CIE Computer Science: Network Fundamentals Exam Essentials | A-Level CIE 计算机：网络基础 考点精讲