Networking Fundamentals Exam Essentials | 网络基础考点精讲

📚 Networking Fundamentals Exam Essentials | 网络基础考点精讲

This guide consolidates the core networking concepts required for IB Computer Science and OCR A-Level Computer Science examinations. Students often struggle to bridge theoretical models with practical scenarios. The following sections break down each topic with bilingual explanations, focusing on examiner expectations and common misconceptions.

本指南整合了 IB 计算机科学和 OCR A-Level 计算机科学考试所需的核心网络概念。学生往往难以将理论模型与实际场景联系起来。以下各节通过双语讲解逐一剖析每个主题，重点关注考官的期望和常见误区。

1. Network Types and Topologies | 网络类型与拓扑结构

Networks are classified by geographical scope. A Local Area Network (LAN) spans a small area such as a school or office, offering high data transfer rates and low latency. A Wide Area Network (WAN) connects LANs over long distances, often using leased telecommunication lines or satellite links. Personal Area Networks (PANs) operate within an individual’s reach, typically via Bluetooth or USB.

网络按地理范围分类。局域网 (LAN) 覆盖学校或办公室等小范围区域，提供高数据传输速率和低延迟。广域网 (WAN) 通过租用的电信线路或卫星链路长距离连接局域网。个人区域网 (PAN) 在个人可触及的范围内运行，通常通过蓝牙或 USB 连接。

Topologies define the physical or logical layout. A star topology connects all nodes to a central switch; failure of one cable does not affect the rest, but the central device is a single point of failure. A mesh topology provides multiple redundant paths — full mesh offers maximum reliability but is expensive, while partial mesh balances cost and resilience. Bus topology, now largely obsolete, suffers from collisions and a single break disabling the entire segment.

拓扑结构定义了物理或逻辑布局。星型拓扑将所有节点连接到中央交换机；一根电缆故障不会影响其余节点，但中央设备是单点故障。网状拓扑提供多条冗余路径——全网状提供最高可靠性但成本高，而部分网状则平衡了成本与弹性。总线拓扑现已基本淘汰，它易发生冲突且一处断裂会导致整个网段瘫痪。

2. Network Hardware | 网络硬件

A network interface card (NIC) provides the physical connection to the network, operating at Layer 1 and Layer 2 (MAC addressing). A switch forwards frames based on MAC addresses within a LAN, learning addresses by examining source MACs. A router forwards packets between different networks using IP addresses, making forwarding decisions via routing tables.

网络接口卡 (NIC) 提供与网络的物理连接，工作在第 1 层和第 2 层（MAC 地址）。交换机根据 MAC 地址在局域网内转发帧，通过检查源 MAC 地址来学习地址。路由器使用 IP 地址在不同网络之间转发数据包，通过路由表做出转发决策。

A wireless access point (WAP) bridges wireless clients to a wired network. A firewall inspects incoming and outgoing traffic based on predefined rules, operating at various layers. In IB and OCR exams, you must be able to justify hardware choices for given scenarios — for instance, a switch reduces unnecessary traffic compared to a hub, which simply repeats signals to all ports.

无线接入点 (WAP) 将无线客户端桥接到有线网络。防火墙根据预定义规则检查进出流量，工作在不同层。在 IB 和 OCR 考试中，你必须能够为给定场景论证硬件选择——例如，与集线器相比，交换机减少了不必要的流量，集线器只是简单地将信号重复发送到所有端口。

3. The OSI Reference Model | OSI 参考模型

The Open Systems Interconnection model divides network communication into seven layers. From bottom to top: Physical (bits on a medium), Data Link (frames, MAC addressing, error detection), Network (packets, IP addressing, routing), Transport (segments, TCP/UDP, port numbers, reliability), Session (dialogue control), Presentation (data translation, encryption), and Application (HTTP, FTP, SMTP).

开放系统互连模型将网络通信分为七层。从下到上：物理层（介质上的比特）、数据链路层（帧、MAC 地址、错误检测）、网络层（数据包、IP 地址、路由）、传输层（段、TCP/UDP、端口号、可靠性）、会话层（对话控制）、表示层（数据转换、加密）和应用层（HTTP、FTP、SMTP）。

IB often asks for advantages of layering: it simplifies troubleshooting, enables interoperability, and allows independent development of each layer. OCR expects you to map devices and protocols to layers — for example, a switch operates at Layer 2, a router at Layer 3, and HTTP at Layer 7. Mnemonics like ‘Please Do Not Throw Sausage Pizza Away’ help recall the sequence.

IB 经常问分层的好处：它简化了故障排除，实现了互操作性，并允许每一层独立开发。OCR 希望你能够将设备和协议映射到各层——例如，交换机工作在第 2 层，路由器在第 3 层，HTTP 在第 7 层。像“Please Do Not Throw Sausage Pizza Away”这样的助记符有助于记忆顺序。

4. TCP/IP Protocol Suite | TCP/IP 协议套件

The TCP/IP model is a concise four-layer architecture: Link (network access), Internet (IP, routing), Transport (TCP, UDP), and Application (HTTP, DNS). It is the de facto standard for the Internet. While OSI is theoretical, TCP/IP is practical and widely implemented.

TCP/IP 模型是一个简洁的四层架构：链路层（网络接入）、网际层（IP、路由）、传输层（TCP、UDP）和应用层（HTTP、DNS）。它是互联网的事实标准。OSI 是理论模型，而 TCP/IP 则是实用且广泛实施的。

Transmission Control Protocol (TCP) provides connection-oriented, reliable delivery with sequencing, acknowledgements, and flow control. It uses a three-way handshake (SYN, SYN-ACK, ACK) to establish a session. User Datagram Protocol (UDP) is connectionless with no guarantees, offering lower overhead — ideal for real-time applications like VoIP and online gaming. Expect questions comparing TCP and UDP in terms of reliability, speed, and use cases.

传输控制协议 (TCP) 提供面向连接的可靠传输，具备排序、确认和流量控制功能。它使用三次握手（SYN、SYN-ACK、ACK）来建立会话。用户数据报协议 (UDP) 是无连接的，没有任何保证，但开销较低——非常适合 VoIP 和在线游戏等实时应用。预计会有比较 TCP 和 UDP 在可靠性、速度和用例方面的问题。

5. IP Addressing and Subnetting | IP 地址与子网划分

An IPv4 address is a 32-bit number, usually expressed in dotted-decimal notation (e.g., 192.168.1.1). It consists of a network portion and a host portion, determined by the subnet mask. CIDR notation (e.g., /24) indicates the number of leading bits used for the network prefix.

IPv4 地址是一个 32 位数字，通常用点分十进制表示（例如 192.168.1.1）。它由网络部分和主机部分组成，由子网掩码确定。CIDR 表示法（例如 /24）表示用于网络前缀的前导位数。

Subnetting allows a large network to be divided into smaller, more manageable sub-networks. Given an IP address and a subnet mask, you must be able to calculate the network ID, broadcast address, and the range of usable host addresses. For example, 192.168.1.0/24 gives a network ID of 192.168.1.0 and a broadcast of 192.168.1.255, with 254 usable hosts. Both IB and OCR may require binary arithmetic for such calculations.

子网划分允许将大型网络划分为更小、更易管理的子网络。给定一个 IP 地址和子网掩码，你必须能够计算网络 ID、广播地址以及可用的主机地址范围。例如，192.168.1.0/24 的网络 ID 为 192.168.1.0，广播地址为 192.168.1.255，可用主机数为 254。IB 和 OCR 都可能要求进行二进制的此类计算。

Private IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) are not routable on the public Internet and require Network Address Translation (NAT) to access external resources. IPv6, with 128-bit addresses, was introduced to overcome IPv4 exhaustion and uses hexadecimal notation with colons (e.g., 2001:0db8:85a3:0000:0000:8a2e:0370:7334).

私有 IP 范围（10.0.0.0/8、172.16.0.0/12、192.168.0.0/16）无法在公共互联网上路由，需要使用网络地址转换 (NAT) 才能访问外部资源。IPv6 采用 128 位地址，用冒号分隔的十六进制表示（例如 2001:0db8:85a3:0000:0000:8a2e:0370:7334），旨在解决 IPv4 地址耗尽问题。

6. Domain Name System (DNS) | 域名系统

DNS translates human-friendly domain names (e.g., http://www.example.com) into IP addresses. The resolution process involves a hierarchy: local DNS cache, recursive resolver, root server, TLD server, and authoritative name server. This distributed database ensures scalability and resilience.

DNS 将人类友好的域名（例如 http://www.example.com）转换为 IP 地址。解析过程涉及一个层级结构：本地 DNS 缓存、递归解析器、根服务器、顶级域服务器和权威名称服务器。这种分布式数据库确保了可扩展性和弹性。

OCR examinations often ask about the purpose of DNS and the steps in a typical query. IB may delve into DNS record types: A (IPv4 address), AAAA (IPv6 address), MX (mail server), and CNAME (canonical name). Understanding how caching reduces traffic and improves speed is essential for both syllabi.

OCR 考试经常询问 DNS 的用途以及典型查询的步骤。IB 可能会深入探讨 DNS 记录类型：A（IPv4 地址）、AAAA（IPv6 地址）、MX（邮件服务器）和 CNAME（规范名称）。理解缓存如何减少流量并提高速度对两个大纲都至关重要。

7. Key Application Layer Protocols | 关键应用层协议

Hypertext Transfer Protocol (HTTP) is a request–response protocol for web traffic, typically using port 80; HTTPS encrypts with TLS on port 443. File Transfer Protocol (FTP) uses ports 20 and 21 for transferring files. Simple Mail Transfer Protocol (SMTP) sends emails (port 25), while Post Office Protocol (POP3, port 110) and Internet Message Access Protocol (IMAP, port 143) retrieve them.

超文本传输协议 (HTTP) 是 Web 流量的请求-响应协议，通常使用端口 80；HTTPS 在端口 443 上使用 TLS 进行加密。文件传输协议 (FTP) 使用端口 20 和 21 传输文件。简单邮件传输协议 (SMTP) 发送电子邮件（端口 25），而邮局协议 (POP3，端口 110) 和互联网消息访问协议 (IMAP，端口 143) 用于检索邮件。

Dynamic Host Configuration Protocol (DHCP) automatically assigns IP configurations to clients using DORA (Discover, Offer, Request, Acknowledge). You should know well-known port numbers and be able to identify protocols from scenarios — a question might describe ‘a user uploading a file to a remote server’ and expect FTP.

动态主机配置协议 (DHCP) 使用 DORA（发现、提供、请求、确认）自动为客户机分配 IP 配置。你应该熟记知名端口号，并能够从场景中识别协议——题目可能描述“用户将文件上传到远程服务器”，并期望回答 FTP。

8. Network Security Fundamentals | 网络安全基础

Common threats include malware (viruses, worms, trojans), phishing, Denial of Service (DoS) attacks, and man-in-the-middle attacks. A firewall can be a hardware appliance or software that filters traffic based on rules like source/destination IP and port numbers. Encryption, such as symmetric (AES) and asymmetric (RSA), protects data confidentiality and integrity.

常见威胁包括恶意软件（病毒、蠕虫、木马）、网络钓鱼、拒绝服务 (DoS) 攻击和中间人攻击。防火墙可以是硬件设备或软件，根据源/目标 IP 和端口号等规则过滤流量。加密技术，如对称加密 (AES) 和非对称加密 (RSA)，可保护数据的机密性和完整性。

A Virtual Private Network (VPN) creates an encrypted tunnel over a public network, ensuring secure remote access. Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) monitor and block suspicious activities. IB and OCR both stress the importance of security policies, user training, and multi-factor authentication.

虚拟专用网 (VPN) 在公共网络上建立加密隧道，确保安全的远程访问。入侵检测系统 (IDS) 和入侵防御系统 (IPS) 监控并阻止可疑活动。IB 和 OCR 都强调安全策略、用户培训和多因素认证的重要性。

9. Wireless Networking | 无线网络

Wi-Fi standards (IEEE 802.11a/b/g/n/ac/ax) operate in the 2.4 GHz and 5 GHz bands, using CSMA/CA to avoid collisions. Service Set Identifiers (SSIDs) identify wireless networks. Security protocols have evolved from WEP (insecure) to WPA, WPA2 (AES-based), and WPA3.

Wi-Fi 标准 (IEEE 802.11a/b/g/n/ac/ax) 使用 2.4 GHz 和 5 GHz 频段，采用 CSMA/CA 避免冲突。服务集标识符 (SSID) 用于识别无线网络。安全协议已从 WEP（不安全）发展到 WPA、WPA2（基于 AES）和 WPA3。

Bluetooth is a short-range wireless technology for PANs, using low power and frequency hopping. In IB, you might compare wireless and wired media in terms of latency, bandwidth, interference, and mobility. OCR may ask about the factors affecting Wi-Fi performance, such as channel overlap, distance, and physical obstructions.

蓝牙是一种用于个人区域网的短距离无线技术，功耗低，采用跳频技术。在 IB 中，你可能需要从延迟、带宽、干扰和移动性方面比较无线和有线介质。OCR 可能会问影响 Wi-Fi 性能的因素，如信道重叠、距离和物理障碍。

10. IB & OCR Exam-Style Common Pitfalls | IB 与 OCR 考试常见陷阱

Students frequently confuse a MAC address with an IP address. A MAC address is a 48-bit hardware identifier used within a local network; an IP address is logical and used for routing between networks. Stating that a switch uses IP addresses to forward frames will lose marks — it uses MAC addresses.

学生经常混淆 MAC 地址和 IP 地址。MAC 地址是 48 位硬件标识符，用于本地网络内；IP 地址是逻辑地址，用于网络间路由。声称交换机使用 IP 地址转发帧会失分——实际上它使用 MAC 地址。

Another pitfall is mixing layers and units: bits at Physical, frames at Data Link, packets at Network, segments at Transport. Also, avoid generic answers like ‘security is important’; specify threats and countermeasures. When explaining DNS, avoid ‘it converts a URL to an IP address’ — the proper term is domain name, not URL.

另一个陷阱是混淆层和单位：物理层是比特，数据链路层是帧，网络层是包，传输层是段。此外，避免笼统的答案，如“安全很重要”，要具体说明威胁和对策。在解释 DNS 时，避免“它将 URL 转换为 IP 地址”——正确的术语是域名，而非 URL。

Practice binary subnetting regularly. For IB Paper 2 or OCR’s computational questions, be prepared to show workings for network and host calculations. Diagrams of topologies must be neat and labelled — examiners reward clarity. Finally, read the question command words: ‘describe’ requires details, ‘explain’ needs reasons and impacts.

定期练习二进制子网划分。对于 IB Paper 2 或 OCR 的计算题，准备好展示网络和主机计算的步骤。拓扑结构图必须整洁且有标注——清晰度会得到考官的认可。最后，仔细阅读题目指令词：“描述”需要细节，“解释”需要原因和影响。

Published by TutorHao | IB & OCR Computer Science Revision Series | aleveler.com

更多咨询请联系16621398022（同微信）

Networking Fundamentals Exam Essentials | 网络基础考点精讲