📚 GCSE AQA Computer Science: Networking Fundamentals | GCSE AQA 计算机：网络基础 考点精讲
A computer network is the backbone of modern digital communication, enabling devices to share data, resources, and services. In the AQA GCSE Computer Science specification, networking fundamentals form a critical part of the theory paper. This article systematically breaks down every essential concept you need to master, from network types and topologies to protocols, security, and hardware, all presented with clear explanations and exam-focused insights.
计算机网络是现代数字通信的支柱，能够让设备共享数据、资源和服务。在 AQA GCSE 计算机科学考试大纲中，网络基础是理论卷的核心内容。本文将系统梳理你需要掌握的每个关键概念，从网络类型和拓扑结构到协议、安全与硬件，全部配以清晰的解释和面向考试的深入分析。
1. What is a Computer Network? | 什么是计算机网络？
A computer network is formed when two or more computing devices are connected together to exchange data and share resources. The connections can be wired (using copper cables or fibre optics) or wireless (using radio waves, infrared, or satellite). The main advantages include sharing files, printers, and internet connections, as well as enabling communication through email and instant messaging.
当两台或多台计算设备连接在一起以交换数据和共享资源时，就形成了计算机网络。连接可以是有线的（使用铜缆或光纤）或无线的（使用无线电波、红外线或卫星）。主要优点包括共享文件、打印机和互联网连接，以及通过电子邮件和即时通讯实现通信。
However, networks also introduce security risks such as malware, hacking, and data interception. Furthermore, they rely on complex hardware and software that can be expensive to set up and maintain. Understanding these trade‑offs is a common exam topic.
然而，网络也带来了安全风险，如恶意软件、黑客攻击和数据拦截。此外，网络依赖复杂的硬件和软件，其搭建和维护成本可能很高。理解这些利弊是常见的考试主题。
2. Types of Networks: LAN and WAN | 网络类型：局域网和广域网
A Local Area Network (LAN) covers a small geographical area, such as a single building or campus. LANs are typically owned and managed by a single organisation. They offer high data transfer speeds, low latency, and use technologies like Ethernet and Wi‑Fi.
局域网 (LAN) 覆盖较小的地理区域，例如一栋建筑或一个校园。局域网通常由单个组织拥有和管理。它们提供高数据传输速度、低延迟，并使用以太网和 Wi‑Fi 等技术。
A Wide Area Network (WAN) spans a large geographical area, connecting LANs across cities, countries, or continents. The internet is the largest WAN. WANs often rely on leased telecommunication lines or satellite links, and the infrastructure is usually owned by multiple service providers. Data speeds over WANs can be slower and more expensive than LANs.
广域网 (WAN) 跨越巨大的地理区域，将不同城市、国家或大洲的局域网连接起来。互联网是最大的广域网。广域网通常依赖租用的电信线路或卫星链路，基础设施常由多个服务提供商拥有。广域网的数据传输速度可能比局域网慢，且成本更高。
3. Network Topologies: Star, Bus, Ring, Mesh | 网络拓扑：星型、总线型、环型、网状
In a star topology, all devices connect to a central switch or hub. If one cable fails, only that device is affected, but if the central device fails, the whole network goes down. Star networks are easy to troubleshoot and expand, making them the most popular in modern wired LANs.
在星型拓扑中，所有设备都连接到中央交换机或集线器。如果某根电缆出现故障，只有该设备会受到影响；但如果中央设备故障，整个网络将瘫痪。星型网络易于故障排除和扩展，是当代有线局域网中最常见的拓扑。
A bus topology uses a single backbone cable to which all devices are attached. It is cheap to install, but a break in the backbone cable brings down the entire network, and performance degrades as more devices transmit simultaneously due to collisions.
总线型拓扑使用一根主干电缆，所有设备都连接在上面。安装成本低，但主干电缆发生断裂会导致整个网络瘫痪；并且随着更多设备同时传输数据，冲突会导致性能下降。
In a ring topology, data travels in one direction around a closed loop. Each device acts as a repeater. A single break can disable the network unless a dual ring is used, which adds cost. Mesh topology provides full or partial interconnection between devices, offering high redundancy and reliability but at a high cabling cost, making it more common in backbone networks.
在环型拓扑中，数据沿闭合环路单向传输，每个设备充当中继器。单点故障可能使网络瘫痪，除非使用双环结构，但这会增加成本。网状拓扑在设备之间提供完全或部分互联，具有高度的冗余和可靠性，但布线成本极高，因此更常用于骨干网络。
4. Client‑Server vs Peer‑to‑Peer Networks | 客户端‑服务器与对等网络
A client‑server network has a central server that provides services, files, and security management to connected clients. Servers are high‑performance machines with specialist operating systems. All data is stored centrally, making backups and updates simpler, but the server is a single point of failure and expensive to maintain.
客户端‑服务器网络拥有一台中央服务器，向连接的客户端提供服务、文件和安全管理工作。服务器是高性能计算机，配备专业操作系统。所有数据集中存储，简化了备份和更新，但服务器是单点故障，且维护成本高。
In a peer‑to‑peer (P2P) network, all devices have equal status and can share resources directly with one another. There is no need for a dedicated server, which reduces costs. P2P is easy to set up for small groups, but security is harder to manage, and files can become scattered. P2P technology is also used in file‑sharing and blockchain systems.
在对等 (P2P) 网络中，所有设备地位平等，可直接相互共享资源，无需专用服务器，从而降低成本。P2P 适合小规模组网，设置简便，但安全管理难度大，文件可能分散存储。P2P 技术还用于文件共享和区块链系统。
5. Network Protocols and the TCP/IP Model | 网络协议和 TCP/IP 模型
A protocol is a set of rules governing how data is transmitted and received over a network. Protocols ensure that devices from different manufacturers can communicate. The modern internet is built on the TCP/IP protocol suite, organised into layers to reduce complexity and allow each layer to evolve independently.
协议是一组管理数据如何在网络上发送和接收的规则。协议确保来自不同制造商的设备能够通信。现代互联网建立在 TCP/IP 协议套件之上，该套件分层组织，以降低复杂性并允许各层独立演进。
The TCP/IP model is often described with four layers: Application, Transport, Internet, and Link (or Network Access). In AQA GCSE, you are expected to understand these layers and the protocols that operate within them, as well as the concept of encapsulation, where data passes down through the layers adding headers before transmission.
TCP/IP 模型通常被描述为四层：应用层、传输层、互联网层和链路层（或网络接入层）。在 AQA GCSE 中，你需要理解这些层次及其中运行的协议，以及封装的概念——数据在传输前向下通过各层并添加报头。
6. The Four Layers of TCP/IP | TCP/IP 的四层结构
The Application Layer provides network services directly to user applications. Protocols at this layer include HTTP, HTTPS, FTP, SMTP, and POP3/IMAP. This is where data creation and interpretation happen.
应用层直接向用户应用程序提供网络服务。该层协议包括 HTTP、HTTPS、FTP、SMTP 和 POP3/IMAP。数据的创建和解释在此发生。
The Transport Layer establishes end‑to‑end communication, handling data segmentation and reassembly, error checking, and flow control. TCP (Transmission Control Protocol) guarantees reliable delivery using acknowledgements and retransmissions, while UDP (User Datagram Protocol) is faster but does not guarantee delivery.
传输层建立端到端通信，处理数据分段、重组、错误检查和流量控制。TCP（传输控制协议）通过确认和重传机制保证可靠传输，而 UDP（用户数据报协议）速度更快但不保证送达。
The Internet Layer addresses and routes packets across networks. The Internet Protocol (IP) assigns logical addresses (IP addresses) to devices and determines the best path for data. Routers operate at this layer, forwarding packets based on IP addresses.
互联网层负责寻址和跨网络路由数据包。互联网协议 (IP) 为设备分配逻辑地址（IP 地址）并确定数据的最佳路径。路由器在此层工作，根据 IP 地址转发数据包。
The Link Layer controls how data is physically transmitted over the network medium, including framing, MAC addressing, and error detection on the local link. Ethernet and Wi‑Fi protocols operate here, handling the actual hardware signals.
链路层控制数据如何在网络介质上物理传输，包括成帧、MAC 地址寻址和本地链路的错误检测。以太网和 Wi‑Fi 协议在此层工作，处理实际的硬件信号。
7. HTTP, HTTPS, FTP, and Email Protocols | HTTP、HTTPS、FTP 和电子邮件协议
HTTP (Hypertext Transfer Protocol) is the foundation of data communication for the World Wide Web. It is a request‑response protocol, where a client (browser) requests web pages from a server. However, HTTP transmits data in plain text, making it vulnerable to interception.
HTTP（超文本传输协议）是万维网数据通信的基础。它是一种请求‑响应协议，客户端（浏览器）向服务器请求网页。但 HTTP 传输明文数据，容易被截获。
HTTPS (HTTP Secure) adds a layer of encryption using SSL/TLS protocols. The data between client and server is encrypted, providing confidentiality and integrity. A padlock icon in the browser indicates an HTTPS connection. Websites handling sensitive information must use HTTPS.
HTTPS（安全超文本传输协议）使用 SSL/TLS 协议增加加密层。客户端与服务器之间的数据被加密，保障机密性和完整性。浏览器中的挂锁图标表示 HTTPS 连接。处理敏感信息的网站必须使用 HTTPS。
FTP (File Transfer Protocol) is used to transfer files between a client and a server. It allows uploading, downloading, and managing files on a remote host. Email protocols include SMTP for sending mail, and POP3 or IMAP for retrieving mail. IMAP keeps emails on the server, allowing synchronisation across multiple devices, while POP3 typically downloads and deletes from the server.
FTP（文件传输协议）用于在客户端和服务器之间传输文件，允许上传、下载和管理远程主机上的文件。电子邮件协议中，SMTP 用于发送邮件，POP3 或 IMAP 用于接收邮件。IMAP 将邮件保留在服务器上，支持多设备同步；而 POP3 通常将邮件下载到本地并从服务器删除。
8. IP Addressing and MAC Addresses | IP 地址与 MAC 地址
Every device on a network requires a unique identifier. A MAC (Media Access Control) address is a 48‑bit hexadecimal number physically assigned to the network interface card by the manufacturer. It is used on the local network segment and operates at the Link Layer. MAC addresses are usually static and cannot be changed permanently.
网络上的每台设备都需要唯一标识符。MAC（介质访问控制）地址是一个 48 位十六进制数，由制造商在出厂时分配给网络接口卡。它用于本地网段，工作在链路层。MAC 地址通常是静态的，不能永久更改。
An IP (Internet Protocol) address is a logical address that identifies a device on a network. IPv4 addresses are 32‑bit numbers, typically written in dotted decimal notation (e.g. 192.168.1.5). IPv6 uses 128‑bit addresses to accommodate more devices. IP addresses can be dynamic (assigned by a DHCP server) or static (manually configured). Routers use IP addresses to forward packets across networks.
IP（互联网协议）地址是标识网络中设备的逻辑地址。IPv4 地址是 32 位数字，通常用点分十进制表示（如 192.168.1.5）。IPv6 使用 128 位地址以容纳更多设备。IP 地址可以是动态的（由 DHCP 服务器分配）或静态的（手动配置）。路由器使用 IP 地址在不同网络间转发数据包。
9. Network Hardware: NIC, Switch, Router, WAP | 网络硬件：网卡、交换机、路由器、无线接入点
A Network Interface Card (NIC) is the hardware component that connects a computer to a network. It can be wired (Ethernet NIC) or wireless (Wi‑Fi adapter). Every NIC has a built‑in, unique MAC address. It converts data into electrical, optical, or radio signals for transmission.
网络接口卡 (NIC) 是将计算机连接到网络的硬件部件，可以是有线的（以太网网卡）或无线的（Wi‑Fi 适配器）。每块网卡都有一个内置的唯一 MAC 地址，将数据转换为电、光或无线电信号进行传输。
A switch is an intelligent device used in star networks to connect multiple devices. Unlike a hub, a switch learns the MAC addresses of connected devices and forwards frames only to the intended recipient, reducing unnecessary traffic and collisions.
交换机是用于星型网络的智能设备，连接多个设备。与集线器不同，交换机学习连接设备的 MAC 地址，并仅将帧转发给目标接收者，从而减少不必要的流量和冲突。
A router connects different networks together, such as a home network to the internet. It forwards data packets based on IP addresses and can perform NAT (Network Address Translation) and firewall functions. A Wireless Access Point (WAP) allows wireless devices to connect to a wired network using Wi‑Fi. Many home devices combine router, switch, and WAP into a single box.
路由器将不同网络连接在一起，例如家庭网络连接到互联网。它根据 IP 地址转发数据包，并可执行网络地址转换 (NAT) 和防火墙功能。无线接入点 (WAP) 允许无线设备通过 Wi‑Fi 连接到有线网络。许多家用设备将路由器、交换机和 WAP 集成在一个盒子中。
10. Factors Affecting Network Performance | 影响网络性能的因素
Bandwidth is the maximum amount of data that can be transmitted over a network connection in a given time, typically measured in bits per second (bps). Higher bandwidth allows more traffic, but available bandwidth is shared among all active devices. If many users stream video or transfer large files simultaneously, performance drops.
带宽是在给定时间内网络连接可以传输的最大数据量，通常以比特每秒 (bps) 为单位。带宽越高，可承载的流量越多，但可用带宽由所有活动的设备共享。如果大量用户同时流媒体或传输大文件，性能就会下降。
Latency is the time delay between sending and receiving data, measured in milliseconds. High latency causes lags in real‑time applications like gaming or video conferencing. The number of devices, distance, transmission medium, and network errors all influence latency and overall performance. Wired connections generally offer lower latency and higher reliability than wireless.
延迟是发送和接收数据之间的时间延迟，以毫秒为单位。高延迟会导致游戏或视频会议等实时应用出现卡顿。设备数量、距离、传输介质和网络错误都会影响延迟和整体性能。通常，有线连接比无线连接具有更低的延迟和更高的可靠性。
Additionally, the choice of hardware (e.g., using switches instead of hubs) and the presence of network congestion and packet collisions can severely degrade performance. Network protocols with large overheads can reduce effective throughput.
此外，硬件的选择（例如使用交换机而非集线器）以及网络拥塞和数据包冲突都会严重降低性能。具有较大开销的网络协议会减少有效吞吐量。
11. Network Security Threats and Prevention | 网络安全威胁与防护
Malware, including viruses, worms, and trojans, can spread across networks, causing data loss, theft, and system damage. Phishing attacks trick users into revealing passwords or financial details. A Denial of Service (DoS) attack floods a server with useless traffic to make it unavailable.
恶意软件，包括病毒、蠕虫和特洛伊木马，可以在网络中传播，导致数据丢失、被盗和系统损坏。网络钓鱼攻击诱骗用户透露密码或财务信息。拒绝服务 (DoS) 攻击通过向服务器发送大量无用流量使其无法提供服务。
To protect networks, a firewall monitors incoming and outgoing traffic and blocks unauthorised access based on predefined rules. Firewalls can be hardware‑based, software‑based, or a combination of both. Strong passwords and user authentication help prevent unauthorised access to network resources.
为保护网络，防火墙监控传入和传出的流量，并根据预定义规则阻止未授权的访问。防火墙可以是基于硬件的、基于软件的或二者结合。强密码和用户身份验证有助于防止对网络资源的未经授权访问。
MAC address filtering on a wireless access point only allows devices with known MAC addresses to connect. Although spoofing is possible, it adds an extra security layer. Anti‑malware software and regular updates are essential to patch vulnerabilities.
无线接入点上的 MAC 地址过滤只允许已知 MAC 地址的设备连接。尽管可以伪造，但它增加了一层额外的安全保护。反恶意软件和定期更新对于修复漏洞至关重要。
12. Encryption and Authentication | 加密与身份验证
Encryption scrambles data into an unreadable form during transmission, so that even if intercepted, the data cannot be understood without the decryption key. Wi‑Fi networks use encryption standards such as WPA3 to protect wireless traffic. Symmetric encryption uses the same key for both encryption and decryption, while asymmetric encryption uses a public‑private key pair.
加密在传输过程中将数据扰乱为不可读的形式，这样即使被截获，没有解密密钥也无法理解数据内容。Wi‑Fi 网络使用 WPA3 等加密标准保护无线通信。对称加密使用相同的密钥进行加密和解密，而非对称加密使用公钥‑私钥对。
Authentication verifies the identity of a user or device attempting to access the network. Common methods include passwords, PINs, biometrics, and two‑factor authentication. Secure networks often combine encryption and authentication to ensure both data privacy and user verification, forming a critical defence against cyberthreats.
身份验证核实尝试访问网络的用户或设备的身份。常见方法包括密码、PIN 码、生物识别和双因素认证。安全的网络通常结合加密和身份验证，以确保数据隐私和用户核实，构成防范网络威胁的关键防线。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导Cancel reply