📚 Network Fundamentals for A-Level Computer Science | A-Level 计算机：网络基础 考点精讲
Computer networks form the backbone of modern digital communication, enabling devices to share data and resources seamlessly. In the A-Level Computer Science syllabus, a solid grasp of networking concepts is essential, covering everything from basic topologies to the layered protocol stacks and security mechanisms that keep our data safe. This revision guide distils the key topics you need to master for the exam, with clear explanations and practical examples.
计算机网络是现代数字通信的支柱，让设备之间能够无缝地共享数据和资源。在A-Level计算机科学大纲中，牢固掌握网络概念至关重要，内容涵盖从基本的拓扑结构到分层的协议栈，以及保护数据安全的各类机制。这份复习指南提炼了你需要掌握的考试重点，并配有清晰的解释和实用示例。
1. Introduction to Computer Networks | 计算机网络简介
A computer network is a collection of interconnected devices that can exchange data using a set of protocols. The primary benefits include resource sharing (printers, storage), easy communication (email, instant messaging), and centralised data management. In an A-Level context, you need to distinguish between stand-alone systems and networked systems, and understand how networks can be classified based on scale, topology, or functional relationships.
计算机网络是由相互连接的设备组成的集合，这些设备可以通过一组协议交换数据。其主要优势包括资源共享（打印机、存储设备）、便捷通信（电子邮件、即时消息）以及集中化的数据管理。在A-Level考试中，你需要区分独立系统和联网系统，并理解如何根据规模、拓扑结构或功能关系对网络进行分类。
Key terminology includes ‘nodes’ (any device on the network), ‘links’ (the physical or wireless connections), ‘bandwidth’ (data transfer capacity, measured in bps), and ‘latency’ (time delay). The performance of a network is often evaluated by bandwidth and latency, where high bandwidth and low latency are desirable.
关键术语包括“节点”（网络中的任何设备）、“链路”（物理或无线连接）、“带宽”（数据传输能力，以bps为单位）以及“延迟”（时间延迟）。网络的性能通常通过带宽和延迟来评估，高带宽和低延迟是最理想的状态。
2. Types of Networks: LAN, WAN, PAN, MAN | 网络类型：局域网、广域网、个域网、城域网
Networks are commonly categorised by their geographical span. A Local Area Network (LAN) connects devices within a limited area like a school, office, or home. LANs typically use Ethernet or Wi-Fi technologies, offer high data transfer rates, and are owned and managed by a single organisation. A Wide Area Network (WAN) spans a large geographical area, often connecting multiple LANs; the Internet is the largest WAN. WANs use leased telecommunication lines or satellite links and are generally slower than LANs due to longer distances and infrastructure shared across many users.
网络通常按地理范围进行分类。局域网 (LAN) 连接学校、办公室或家庭等有限区域内的设备。局域网通常使用以太网或Wi-Fi技术，提供较高的数据传输速率，并由单一组织拥有和管理。广域网 (WAN) 覆盖广阔的地理区域，通常连接多个局域网；互联网就是最大的广域网。广域网使用租用的电信线路或卫星链路，由于距离远且基础设施由众多用户共享，其速度通常慢于局域网。
Other categories include Personal Area Network (PAN) for extremely short-range connections (Bluetooth, USB), and Metropolitan Area Network (MAN) covering a city or large campus. The exam may ask you to compare these in terms of ownership, speed, and cost.
其他类别包括用于超短距离连接的个域网 (PAN)（蓝牙、USB），以及覆盖城市或大型校园的城域网 (MAN)。考试可能会要求你从所有权、速度和成本等方面对这些网络类型进行比较。
3. Network Topologies | 网络拓扑结构
The topology describes the physical or logical arrangement of nodes in a network. The star topology has all devices connected to a central switch or hub. If one cable fails, only that node is affected, but the central device is a single point of failure. The bus topology uses a single backbone cable; all nodes share it. It is cheap and easy to install but a break in the backbone brings the whole network down and performance degrades with many nodes.
拓扑结构描述了网络中节点的物理或逻辑布局。星型拓扑将所有设备连接到一个中央交换机或集线器。如果某根电缆出现故障，只有该节点会受到影响，但中心设备是单点故障源。总线型拓扑使用单一的主干电缆，所有节点共享此电缆。它价格低廉且易于安装，但主干断裂会导致整个网络瘫痪，并且节点增多时性能会下降。
In a mesh topology, each node is connected to several other nodes, providing high redundancy and reliability. However, it is expensive due to extensive cabling. Ring topology connects each node to exactly two others, forming a circle; data travels in one direction, and a single break can disrupt the entire ring unless a dual-ring is used. Modern LANs predominantly use star or extended star (hierarchical) topologies, while the Internet backbone uses a partial mesh.
在网状拓扑中，每个节点都连接到多个其他节点，提供了极高的冗余性和可靠性。但由于需要大量布线，成本高昂。环形拓扑将每个节点仅与另外两个节点相连，形成一个环；数据单向传输，除非使用双环，否则单点故障会中断整个环路。现代局域网主要采用星型或扩展星型（分层）拓扑，而互联网骨干则采用部分网状拓扑。
4. The OSI and TCP/IP Models | OSI 与 TCP/IP 模型
Protocol layering is a fundamental concept for understanding how network communication is organised. The OSI (Open Systems Interconnection) model has seven layers: Physical, Data Link, Network, Transport, Session, Presentation, and Application. Each layer provides services to the layer above and is implemented by specific protocols. The TCP/IP model is more practical and consists of four layers: Link, Internet, Transport, and Application. The A-Level syllabus typically expects you to describe the function of each layer and map common protocols to the TCP/IP stack.
协议分层是理解网络通信组织方式的一个基本概念。OSI（开放系统互连）模型共有七层：物理层、数据链路层、网络层、传输层、会话层、表示层和应用层。每一层向上层提供特定的服务，并由具体的协议实现。TCP/IP模型则更为实用，包含四层：链路层、网络层、传输层和应用层。A-Level考纲通常要求你描述每层的功能，并将常见协议映射到TCP/IP协议栈中。
For example, the Internet layer (equivalent to OSI Network layer) handles logical addressing and routing with the IP protocol. The Transport layer uses TCP (Transmission Control Protocol) for reliable, connection-oriented delivery, and UDP (User Datagram Protocol) for fast, connectionless communication. The Application layer includes HTTP, FTP, SMTP. Understanding encapsulation – where each layer adds its own header – helps explain how data is transmitted from source to destination.
例如，网络层（对应OSI的网络层）通过IP协议处理逻辑寻址和路由。传输层使用TCP（传输控制协议）实现可靠、面向连接的传递，使用UDP（用户数据报协议）实现快速、无连接的通信。应用层包含HTTP、FTP、SMTP等。理解封装——即每一层添加自己的首部——有助于解释数据如何从源发送到目的地。
5. Network Hardware: Routers, Switches, Hubs, etc. | 网络硬件：路由器、交换机、集线器等
Different devices operate at different layers of the OSI model. A hub (Layer 1) simply repeats incoming signals to all ports, creating a single collision domain. It is considered inefficient and largely obsolete. A switch (Layer 2) uses MAC addresses to forward frames only to the intended port, reducing collisions and increasing efficiency. Switches form the core of modern Ethernet LANs.
不同设备工作在OSI模型的不同层次。集线器（第1层）只是简单地将输入信号转发到所有端口，产生一个冲突域。它被认为效率低下，目前已基本被淘汰。交换机（第2层）利用MAC地址将帧仅转发到目标端口，从而减少冲突并提高效率。交换机构成了现代以太网局域网的核心。
A router (Layer 3) forwards packets based on IP addresses, connecting different networks (e.g., your home LAN to the Internet). It uses routing tables to determine the best path. A modem converts digital signals from a computer into analogue signals for transmission over telephone or cable lines. A wireless access point (WAP) allows Wi-Fi devices to connect to a wired network. Other hardware includes network interface cards (NICs), bridges, repeaters, and gateways, each serving a specific role in the network infrastructure.
路由器（第3层）基于IP地址转发数据包，连接不同的网络（例如，将你的家庭局域网连接到互联网）。它使用路由表来确定最佳路径。调制解调器将计算机的数字信号转换为模拟信号，以便通过电话线或电缆传输。无线接入点 (WAP)允许Wi-Fi设备连接到有线网络。其他硬件还包括网络接口卡 (NIC)、网桥、中继器和网关，每种设备都在网络基础设施中扮演特定的角色。
6. IP Addressing and Subnetting | IP 地址与子网划分
Every device on an IP network needs a unique IP address. IPv4 addresses are 32-bit numbers usually written in dotted decimal notation (e.g., 192.168.1.1). They consist of a network portion and a host portion, identified by a subnet mask. Subnetting allows a larger network to be divided into smaller, more manageable sub-networks, improving security and performance.
IP网络上的每个设备都需要唯一的IP地址。IPv4地址是32位数字，通常用点分十进制表示法（例如192.168.1.1）。它们由网络部分和主机部分组成，并通过子网掩码进行标识。子网划分可以将一个大型网络分割成更小、更易于管理的子网络，从而提高安全性和性能。
For A-Level, you should be able to perform basic subnetting: given an IP address and a subnet mask, calculate the network address, broadcast address, and range of usable host addresses. For example, with 192.168.1.0/24 (subnet mask 255.255.255.0), the first three octets are the network part, and the last octet is for hosts (1–254). CIDR notation (/24) indicates the number of mask bits. IPv6 addresses use 128 bits and hexadecimal notation to solve the exhaustion problem, but IPv4 remains heavily examined.
在A-Level考试中，你应能够进行基本的子网划分：根据给定的IP地址和子网掩码，计算出网络地址、广播地址以及可用主机地址范围。例如，对于192.168.1.0/24（子网掩码255.255.255.0），前三组数字是网络部分，最后一组表示主机（1-254）。CIDR表示法（/24）指明了掩码位的数量。IPv6地址使用128位和十六进制表示法来解决地址耗尽问题，但IPv4仍然是考试的重点。
7. Domain Name System (DNS) | 域名系统 (DNS)
DNS translates human-readable domain names (like http://www.example.com) into machine-readable IP addresses. It operates as a distributed database organised in a hierarchical tree structure. At the top are root servers, followed by top-level domain (TLD) servers (.com, .org, .uk), authoritative name servers, and local DNS resolvers. When you type a URL, your computer queries a DNS resolver, which traverses the hierarchy until it obtains the IP address, caching results to speed up future requests.
DNS将人类可读的域名（如www.example.com）转换为机器可读的IP地址。它作为一个分布式数据库运行，并按层次化的树形结构组织。最顶层是根服务器，接下来是顶级域 (TLD) 服务器（.com、.org、.uk），然后权威域名服务器，最后是本地DNS解析器。当你输入一个URL时，你的计算机会向DNS解析器发出查询请求，解析器会逐层遍历查询，直到获取到IP地址，同时缓存结果以加速未来的请求。
DNS records include A (mapping a domain to an IPv4 address), AAAA (IPv6), CNAME (alias), MX (mail server), and NS (name server). Exam questions often focus on the role of DNS in the Internet and the sequence of events when a web page is requested. Understanding DNS also ties into security topics like DNS spoofing.
DNS记录包括A（将域名映射到IPv4地址）、AAAA（IPv6）、CNAME（别名）、MX（邮件服务器）和NS（域名服务器）。考试题目通常聚焦于DNS在互联网中的作用，以及请求网页时的事件序列。理解DNS还关联到DNS欺骗等安全主题。
8. Common Network Protocols (HTTP, FTP, SMTP, etc.) | 常见网络协议 (HTTP, FTP, SMTP 等)
Protocols define rules for data exchange between devices. HTTP (Hypertext Transfer Protocol) is the foundation of data communication on the World Wide Web, a request-response protocol that uses TCP port 80. HTTPS (HTTP Secure) adds encryption via TLS/SSL, using port 443. FTP (File Transfer Protocol) is used for transferring files between a client and a server, often utilising ports 20 and 21.
协议定义了设备之间数据交换的规则。HTTP（超文本传输协议）是万维网数据通信的基础，是一种请求-响应协议，使用TCP 80端口。HTTPS（安全超文本传输协议）通过TLS/SSL添加加密，使用443端口。FTP（文件传输协议）用于在客户端和服务器之间传输文件，通常使用20和21端口。
SMTP (Simple Mail Transfer Protocol) sends emails, while POP3 and IMAP are used by email clients to receive them. DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses to devices on a network. SSH (Secure Shell) provides encrypted remote login. The exam may present a scenario and ask which protocol is most suitable, reinforcing the need to know their purposes and associated port numbers.
SMTP（简单邮件传输协议）用于发送邮件，而POP3和IMAP则供电子邮件客户端接收邮件使用。DHCP（动态主机配置协议）自动为网络上的设备分配IP地址。SSH（安全外壳协议）提供加密的远程登录。考试可能会给出一个情景，并询问哪种协议最合适，因此你需要掌握这些协议的用途及相关的端口号。
9. Network Security Basics | 网络安全基础
Network security aims to protect data during transmission and prevent unauthorised access. Key threats include malware (viruses, worms, trojans), phishing (fraudulent attempts to obtain sensitive information), DoS/DDoS attacks (overwhelming a server with traffic), man-in-the-middle attacks (intercepting communication), and SQL injection (inserting malicious code into a database query).
网络安全旨在保护传输中的数据并防止未授权访问。主要威胁包括恶意软件（病毒、蠕虫、特洛伊木马）、网络钓鱼（骗取敏感信息的欺诈行为）、DoS/DDoS攻击（通过流量淹没服务器）、中间人攻击（拦截通信）以及SQL注入（向数据库查询中插入恶意代码）。
To counter these threats, a range of defensive measures is used. Firewalls monitor and control incoming/outgoing traffic based on predefined security rules. Encryption (symmetric and asymmetric) scrambles data so that only authorised parties with the correct key can read it. VPNs (Virtual Private Networks) create a secure tunnel over a public network. Authentication mechanisms such as passwords, biometrics, and two-factor authentication verify user identity. For exam success, you should be able to explain how a simple firewall filters packets, or why a WPA2 password is better than WEP.
为了应对这些威胁，需要采取一系列的防御措施。防火墙根据预设的安全规则监控和控制进出流量。加密（对称和非对称）将数据打乱，只有拥有正确密钥的授权方才能读取。VPN（虚拟专用网络）在公共网络上创建一个安全隧道。认证机制，如密码、生物识别和双因素认证，可以验证用户身份。为了在考试中取得好成绩，你应该能够解释简单的防火墙如何过滤数据包，或者为什么WPA2密码比WEP更安全。
10. Summary and Exam Tips | 总结与应试技巧
Network fundamentals can appear in multiple-choice, short-answer, and extended-response questions. A frequent pitfall is confusing the roles of switches and routers: remember that switches work with MAC addresses (Layer 2) within a LAN, while routers work with IP addresses (Layer 3) to connect different networks. Always state the layer a protocol or device operates at if known, as this demonstrates deeper understanding.
网络基础的考点可能出现在选择题、简答题和扩展回答题中。一个常见的误区是混淆交换机和路由器的角色：请记住，交换机在局域网内使用MAC地址（第2层）工作，而路由器使用IP地址（第3层）来连接不同的网络。如果知道一个协议或设备运作在哪一层，一定要说明，这能体现你更深层次的理解。
Practice subnetting calculations and drawing network topologies under timed conditions. For security questions, use specific terminology like ‘symmetric encryption’, ‘digital certificate’, or ‘DMZ’ rather than vague descriptions. Revise typical port numbers (HTTP 80, HTTPS 443, SMTP 25, FTP 21, SSH 22, DNS 53) as they are frequently tested. Finally, structure your answers logically, referring to protocols and hardware with precision.
在限时条件下练习子网划分计算和绘制网络拓扑图。对于安全问题，要使用“对称加密”、“数字证书”或“DMZ”等具体术语，而不是模糊的描述。复习常见的端口号（HTTP 80、HTTPS 443、SMTP 25、FTP 21、SSH 22、DNS 53），因为它们经常被考察。最后，逻辑清晰地组织你的答案，准确地引用协议和硬件。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导