📚 IGCSE CCEA Computer Science: Networking Basics Key Points | IGCSE CCEA 计算机：网络基础 考点精讲
Computer networks underpin modern digital life, enabling resource sharing, communication, and global connectivity. For IGCSE CCEA Computer Science students, a solid understanding of networking basics is essential: you must be able to define network types, compare topologies, explain the roles of hardware and protocols, and evaluate security measures. This article breaks down every key concept with bilingual clarity, aligned to the CCEA specification.
计算机网络是现代数字生活的基础，它支持资源共享、通信和全球互联。对于 IGCSE CCEA 计算机科学的学生而言，扎实掌握网络基础知识至关重要：你需要能够定义网络类型、比较拓扑结构、解释硬件和协议的作用，并评估安全措施。本文以中英双语清晰拆解每一个关键概念，严格对应 CCEA 考纲要求。
1. What is a Network? LAN vs WAN | 网络的定义：局域网与广域网
A computer network is two or more interconnected computing devices that can exchange data and share resources. Networks are typically classified by their geographical coverage. A Local Area Network (LAN) connects computers within a small geographical area, such as a school, office, or home. LANs usually offer high data transfer rates, low latency, and are often owned and managed by a single organisation. By contrast, a Wide Area Network (WAN) spans a large geographical area—across cities, countries, or even continents. The internet is the largest example of a WAN. WANs may rely on leased telecommunication lines, satellite links, or undersea cables, and are typically provided by multiple service providers.
计算机网络是指两台或以上相互连接的计算设备，能够交换数据并共享资源。网络通常按地理覆盖范围分类。局域网（LAN）连接小范围内的计算机，例如学校、办公室或家庭。局域网通常提供高数据传输速率、低延迟，并且常由单一组织拥有和管理。相比之下，广域网（WAN）覆盖广阔的地理区域——跨城市、国家甚至大洲。互联网就是最大的广域网实例。广域网可能依赖租用的电信线路、卫星链路或海底光缆，通常由多个服务提供商共同提供。
2. Network Topologies: Star, Bus, Ring, and Mesh | 网络拓扑：星形、总线、环状和网状
Network topology refers to the physical or logical arrangement of nodes in a network. In the star topology, all devices connect to a central node (a switch or hub). The advantage is that if one cable fails, only that node is affected, and it is easy to add new devices. However, if the central device fails, the whole network goes down. The bus topology connects all devices to a single backbone cable. It is cheap and simple to install, but a break in the backbone can disable the entire network, and performance degrades with heavy traffic. The ring topology connects devices in a closed loop, where data travels in one direction. It can offer predictable performance, but a single break can disrupt the whole ring unless dual rings are used. In a mesh topology, every device is connected to every other device (full mesh) or to several others (partial mesh). Mesh networks are highly reliable and can self-heal, but they are extremely expensive due to the large amount of cabling.
网络拓扑是指网络中节点的物理或逻辑排列方式。在星形拓扑中，所有设备连接到一个中央节点（交换机或集线器）。其优点是若某根线缆故障，仅影响该节点，且易于添加新设备；但若中央设备故障，整个网络便瘫痪。总线拓扑将所有设备连接到一根主干电缆。它成本低廉、安装简单，但主干断裂会使整个网络失效，且重负载下性能迅速下降。环状拓扑将设备连成闭合环路，数据单向传输。它能提供可预测的性能，但单点故障可能中断整个环，除非采用双环结构。在网状拓扑中，每台设备直接连接至其他所有设备（全网状）或部分设备（部分网状）。网状网络高度可靠且能自愈，但布线量极大，成本高昂。
3. Network Hardware: NICs, Switches, Routers, Hubs, Bridges, and Firewalls | 网络硬件：网卡、交换机、路由器、集线器、网桥和防火墙
A Network Interface Card (NIC) is an internal component that allows a device to connect to a network; it contains a unique MAC address. A switch is an intelligent device that connects multiple devices on a LAN and forwards data frames only to the specific port of the destination MAC address, reducing unnecessary traffic. A hub is a legacy device that broadcasts data to all ports, causing collisions and inefficiency. A router connects different networks (e.g., a home LAN to the internet), forwarding data packets based on IP addresses and making routing decisions using routing tables. A bridge connects two separate LANs or segments, filtering traffic by MAC address to reduce collisions. A firewall monitors incoming and outgoing network traffic and decides whether to allow or block specific packets based on predefined security rules, acting as a barrier between trusted and untrusted networks.
网卡（NIC）是让设备连接网络的内部组件，内含唯一的 MAC 地址。交换机是智能设备，连接局域网中的多台设备，并仅将数据帧转发到目标 MAC 地址对应的端口，从而减少不必要流量。集线器是传统的广播式设备，将数据发送到所有端口，易造成冲突和低效。路由器连接不同网络（例如家庭局域网与互联网），根据 IP 地址转发数据包，并通过路由表作出路由决策。网桥连接两个独立的局域网或网段，基于 MAC 地址过滤流量以减少冲突。防火墙监控进出网络流量，依据预设安全规则决定允许或阻止特定数据包，充当可信网络与不可信网络之间的屏障。
4. Network Protocols and the TCP/IP Layered Model | 网络协议与 TCP/IP 分层模型
Protocols are standardised rules that govern how data is transmitted and received. The TCP/IP model is a four-layer conceptual framework used on the internet. The Application layer handles high-level protocols such as HTTP (Hypertext Transfer Protocol) for web pages, HTTPS (HTTP Secure) for encrypted web traffic, FTP (File Transfer Protocol) for file transfers, SMTP (Simple Mail Transfer Protocol) for sending emails, and POP3/IMAP for retrieving emails. The Transport layer ensures reliable data transfer: TCP (Transmission Control Protocol) establishes a connection, breaks data into segments, and reassembles them, providing error checking and flow control; UDP (User Datagram Protocol) is a connectionless alternative for speed-critical applications like video streaming. The Internet layer is responsible for logical addressing and routing, with IP (Internet Protocol) assigning source and destination IP addresses to data packets. The Link layer deals with the physical transmission of data over a specific medium, encompassing Ethernet standards and MAC addressing.
协议是规定数据传输和接收方式的标准化规则。TCP/IP 模型是互联网使用的四层概念框架。应用层处理高层协议，如用于网页的 HTTP（超文本传输协议）、用于加密网页流量的 HTTPS（安全超文本传输协议）、用于文件传输的 FTP（文件传输协议）、用于发送电子邮件的 SMTP（简单邮件传输协议）以及用于接收邮件的 POP3/IMAP。传输层确保可靠数据传输：TCP（传输控制协议）建立连接，将数据拆分成数据段并重组，提供错误校验和流量控制；UDP（用户数据报协议）是无连接的替代协议，适用于视频流等对速度要求高的应用。网络层负责逻辑寻址与路由，由 IP（互联网协议）为数据包分配源和目标 IP 地址。链路层处理特定介质上的物理数据传输，涵盖以太网标准和 MAC 寻址。
5. IP Addresses and MAC Addresses | IP 地址与 MAC 地址
Every device on a network has at least two types of addresses. An IP address is a logical address assigned by the network or manually by an administrator. IPv4 addresses are 32-bit numbers typically written in dotted decimal notation (e.g., 192.168.1.1). IPv6 uses 128-bit addresses to provide a vastly larger address space, written as eight groups of four hexadecimal digits. A MAC (Media Access Control) address is a unique 48-bit physical identifier hardcoded into a NIC by the manufacturer, usually expressed as six pairs of hexadecimal digits separated by colons or hyphens (e.g., 00:1A:2B:3C:4D:5E). While IP addresses can change as a device moves between networks, MAC addresses remain constant and are used for communication within the same local network segment.
网络上的每台设备至少拥有两类地址。IP 地址是由网络或管理员手动分配的逻辑地址。IPv4 地址是 32 位数字，通常写成点分十进制表示（例如 192.168.1.1）。IPv6 使用 128 位地址以提供极大的地址空间，表示为八组四位十六进制数。MAC（介质访问控制）地址是由制造商烧录在网卡中的唯一 48 位物理标识符，通常用冒号或连字符分隔的六对十六进制数字表示（例如 00:1A:2B:3C:4D:5E）。IP 地址可能随设备在不同网络间移动而改变，但 MAC 地址固定不变，用于同一局域网段内的通信。
6. Client-Server and Peer-to-Peer Network Models | 客户端-服务器与对等网络模型
In a client-server network, one or more powerful central servers provide resources, data storage, and services such as email, file sharing, or authentication. Clients request services from the server. This model centralises management, improves security, and enables efficient backup, but requires dedicated hardware and IT expertise. In a peer-to-peer (P2P) network, each computer (peer) can act as both client and server, sharing resources directly without a dedicated central server. P2P networks are cheap and easy to set up, suitable for small environments, but they lack central control, making security and data backup more challenging. Modern file-sharing applications and blockchain technology use P2P principles.
在客户端-服务器网络中，一台或多台功能强大的中央服务器提供资源、数据存储以及电子邮件、文件共享或身份验证等服务。客户端向服务器请求服务。该模型集中管理、提升安全性并便于备份，但需要专用硬件和 IT 专业人员。在对等（P2P）网络中，每台计算机（对等点）既可作客户端也可作服务器，直接共享资源而无需专用中央服务器。P2P 网络成本低廉、搭建简单，适合小型环境，但缺乏集中控制，安全性和数据备份更具挑战。现代文件共享应用和区块链技术均采用 P2P 原理。
7. Network Security: Firewalls, Encryption, and Authentication | 网络安全：防火墙、加密与身份验证
Network security aims to protect data confidentiality, integrity, and availability. A firewall filters traffic based on rules, blocking unauthorised access. Encryption scrambles data so that only authorised parties with the correct decryption key can read it; symmetric encryption uses the same key for encryption and decryption, while asymmetric encryption uses a public/private key pair. Digital certificates and SSL/TLS protocols provide secure communication over the internet (HTTPS). Authentication methods verify user identity: strong passwords, biometric scans (fingerprint, facial recognition), and two-factor authentication (2FA) combining something you know (password) with something you have (a mobile device). Antivirus and anti-malware software detect and remove malicious code. Regular software updates and user education are equally critical.
网络安全旨在保护数据的机密性、完整性和可用性。防火墙根据规则过滤流量，阻止未经授权的访问。加密将数据打乱，使只有持有正确解密密钥的授权方才能读取；对称加密使用同一密钥加解密，而非对称加密使用公钥/私钥对。数字证书和 SSL/TLS 协议通过 HTTPS 提供安全的互联网通信。身份验证方法用于核实用户身份：强密码、生物识别扫描（指纹、人脸识别）以及双因素认证（2FA），结合“你知道的”（密码）和“你拥有的”（手机）。防病毒和反恶意软件可检测并删除恶意代码。定期的软件更新与用户教育同样至关重要。
8. The Internet and the World Wide Web: Understanding the Difference | 互联网与万维网：区分概念
Students often confuse the internet and the World Wide Web. The internet is a massive global network of interconnected networks that uses the TCP/IP protocol suite to link devices worldwide. It provides the physical and logical infrastructure. The World Wide Web (WWW) is a service that runs on top of the internet, consisting of interlinked hypertext documents and resources accessed through browsers using HTTP/HTTPS. Other services also run on the internet, such as email (SMTP/POP3/IMAP), file transfer (FTP), voice over IP (VoIP), and video streaming. Therefore, the internet is the network, and the web is one of many applications on that network.
学生常将互联网和万维网混淆。互联网是使用 TCP/IP 协议族连接全球设备的巨大全球性互联网络，提供了物理和逻辑基础设施。万维网（WWW）是运行在互联网之上的服务，由通过浏览器使用 HTTP/HTTPS 访问的超文本文档和资源组成。互联网上还运行着其他服务，如电子邮件（SMTP/POP3/IMAP）、文件传输（FTP）、IP 语音 (VoIP) 和视频流。因此，互联网是网络本身，而万维网是其上的众多应用之一。
9. Data Transmission: Packets and Packet Switching | 数据传输：数据包与分组交换
When data is sent across a network, it is broken down into smaller chunks called packets. Each packet contains the payload (a portion of the original data) and a header with source and destination IP addresses, sequence number, and error-checking bits. Packet switching is the method used by the internet where packets travel independently through the network and may take different routes to reach the destination. Routers read the header information and forward packets hop by hop. At the destination, packets are reassembled in the correct order using sequence numbers. If a packet is lost or corrupted, the receiving device can request retransmission (using TCP). This approach makes efficient use of network resources and provides robustness, as traffic can be rerouted if a path fails.
数据通过网络发送时，会被拆分成较小的数据块，称为数据包。每个数据包包含有效载荷（原始数据的一部分）以及报头，报头中含有源和目标 IP 地址、序列号及错误校验位。分组交换是互联网使用的方法，数据包在网络中独立传输，可能经过不同路由到达目的地。路由器读取报头信息，逐跳转发数据包。在目的地，数据包依据序列号按正确顺序重组。若某个数据包丢失或损坏，接收设备可请求重传（使用 TCP）。这种方式高效利用网络资源并提供健壮性，因为即使某路径失效，流量也可重新路由。
10. Factors Affecting Network Performance: Bandwidth, Latency, and Media | 影响网络性能的因素：带宽、延迟与传输介质
Network performance is measured by bandwidth (the maximum data transfer capacity, usually in bits per second) and latency (the time delay for a packet to travel from source to destination). High bandwidth and low latency are desirable. The choice of transmission media significantly impacts performance: copper cables (e.g., twisted pair, coaxial) are cost-effective but susceptible to electromagnetic interference and signal attenuation over distance. Fibre optic cables use pulses of light to transmit data at extremely high speeds over long distances with minimal interference, but they are more expensive. Wireless transmission (e.g., Wi-Fi, Bluetooth) offers mobility and convenience but can suffer from interference, limited range, and security vulnerabilities. Other factors include the number of users simultaneously accessing the network, server performance, and the efficiency of protocols.
网络性能通过带宽（最大数据传输容量，通常以比特每秒计）和延迟（数据包从源到目的地的时延）来衡量。高带宽和低延迟是理想目标。传输介质的选择对性能影响显著：铜缆（如双绞线、同轴电缆）成本效益高，但易受电磁干扰和距离信号衰减影响。光纤使用光脉冲高速远距离传输数据，干扰极小，但成本较高。无线传输（如 Wi-Fi、蓝牙）提供移动性和便利性，但可能受到干扰、范围有限且存在安全漏洞。其他因素还包括同时访问网络的用户数量、服务器性能以及协议效率。
11. Cloud Storage and Cloud Computing | 云存储与云计算
Cloud computing delivers computing services—including storage, processing power, and software—over the internet, eliminating the need for local infrastructure. Cloud storage allows users to save files on remote servers accessible from any internet-connected device, with examples such as Google Drive, OneDrive, and iCloud. Benefits include scalability (pay for what you use), accessibility, automatic backups, and reduced hardware costs. However, reliance on a stable internet connection, potential data privacy concerns, and ongoing subscription costs are drawbacks. IGCSE candidates should understand the key cloud service models: IaaS (Infrastructure as a Service), PaaS (Platform as a Service), and SaaS (Software as a Service), though for this exam board focus is on general principles and storage implications.
云计算通过互联网提供计算服务，包括存储、处理能力和软件，消除了对本地基础设施的需求。云存储允许用户将文件保存在远程服务器上，可从任何联网设备访问，例如 Google Drive、OneDrive 和 iCloud。其优势包括可扩展性（按需付费）、可访问性、自动备份和降低硬件成本。然而，依赖稳定的互联网连接、潜在的数据隐私问题以及持续的订阅费用是其缺点。IGCSE 考生应理解关键的云服务模型：IaaS（基础设施即服务）、PaaS（平台即服务）和 SaaS（软件即服务），但对本考局而言，重点在于一般原理和存储方面的影响。
12. CCEA Exam Tips and Common Pitfalls | CCEA 考试技巧与常见误区
In the CCEA examination, candidates often lose marks by confusing a MAC address with an IP address, stating that a hub filters traffic (it does not, switches do), or claiming the web and internet are the same. When comparing topologies, always refer to cost, ease of setup, impact of a single point of failure, and performance. Be precise with protocol names: HTTP vs HTTPS for security; TCP for reliability. Use correct technical vocabulary. In security questions, explain what a technology does rather than just naming it—e.g., “A firewall examines incoming and outgoing packets and blocks those that violate security rules.” Write in full sentences and avoid vague terms like “safer” without justification.
在 CCEA 考试中，考生常因混淆 MAC 地址与 IP 地址、声称集线器能过滤流量（它不能，交换机可以）或认为万维网与互联网相同而失分。比较拓扑结构时，务必提及成本、安装难易度、单点故障影响和性能。协议名称要精确：HTTP 与 HTTPS 比较安全性；TCP 用于可靠性。使用正确的技术词汇。在安全题目中，要解释技术如何起作用而不仅是点名——例如，“防火墙检查进出的数据包，并阻止违反安全规则的那些。”用完整句子作答，避免使用“更安全”等模糊词汇而不加解释。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
或截图后用「扫一扫 → 相册」选择本图