Talib AliCybersecurity Study Guide & Portfolio

Study Guide

What Is a Network?

What a network is, the devices and elements that make communication possible, and how networks are described by scope.

Lesson 3.1 Networking Fundamentals

“Linked switches, access ports and VLAN trunks” is now in Switch Ports, VLANs and 802.1Q Trunks.

“Fictional example: staff and guest networks across two switches” is now in Switch Ports, VLANs and 802.1Q Trunks.

“Who receives the traffic?” is now in Unicast, Multicast, Broadcast and Anycast.

“The seven OSI layers” is now in OSI and TCP/IP Models.

“Applying the model to a web request” is now in OSI and TCP/IP Models.

“Addresses, ports and sockets answer different questions” is now in TCP, UDP, Ports and Sockets.

“Private IPv4 and IPv6” is now in IPv4 and IPv6 Addresses.

“Follow the worked explanations” is now in OSI and TCP/IP Models.

Almost every attack, defence and investigation in cybersecurity involves a network somewhere. This first networking lesson assumes no prior knowledge: it explains what a network is, what has to be in place for two devices to communicate, and the words used to describe networks of different sizes.

You cannot protect, or investigate, something you cannot picture. Knowing what each device on a network does, and what has to work for two devices to talk, is how you work out where data goes, where it can be stopped and where an attacker might get in.

Think

Connected, but not communicating

Start with something that goes wrong in offices and schools every week. The setting is fictional.

A teacher joins a new laptop to the staff-room printer with a network cable. The lights beside the cable come on at both ends, and when the teacher presses Print the printer wakes up straight away. But every page it prints is covered in rows of random symbols.

Think it through

A laptop is joined to a printer by a working network cable. When the teacher prints a worksheet, the printer wakes up at once but prints only pages of random symbols. What is most likely missing?
Show the answer

Answer: C. Rules for the data that the laptop and the printer both understand.

The cable did its job: every signal arrived, which is why the printer woke up and printed. What failed was understanding. The laptop sent the printing information in a form the printer could not read, so the printer turned it into symbols. This really happens when a computer uses the wrong printer software.

Think of a telephone call on a perfectly clear line, between two people who speak different languages. Every word arrives, and neither understands the other. Devices are the same: a connection carries the signals, but both ends have to follow the same agreed rules for what the signals mean. Rules like these are called protocols.

Where the comparison stops. People can often work out a little of a language they do not speak. Devices cannot guess: if the rules do not match exactly, the data is meaningless to them. And a protocol covers more than a language does: how data is addressed, how the two sides take turns and how mistakes are noticed.

Explain

What a network is and why it exists

The teacher installs the right printer software on the laptop, and the worksheet prints. When the teacher presses Print, the laptop does not send a sheet of paper anywhere: it sends the printer the information it needs to print the worksheet. That information is called the print job. Now the school wants every laptop to send print jobs to that printer, and to share files, email and the internet as well.

Think it through

A teacher presses Print on a laptop, and a print job has to get from the laptop to the printer across the room. What has to happen inside the laptop, between the two devices, and inside the printer, before the worksheet comes out on paper?

Show what happens

Four things have to be in place, and each does a different job.

  • An application, here the word processor, holds the document and asks for it to be printed.
  • A protocol, the agreed rules, turns the document into a print job the printer understands and addresses it to the printer.
  • A network interface card (NIC), the hardware that connects a device to a network, turns the print job into signals.
  • Transmission media, the radio waves or cables, carry the signals between the devices.

The printer then works through the same elements in reverse: its NIC turns the signals back into the print job, its protocol reads it, and its software prints the worksheet on paper.

That is what a network is: a collection of interconnected devices that communicate and exchange data using agreed rules called protocols. Networks exist so that devices can share information, resources and services: files, printers, applications and internet connectivity.

Four elements every network conversation needs

A fictional teacher prints a worksheet from a laptop to the staff-room printer. In each device the application hands the data down to the protocol, and the protocol to the network interface card. Transmission media carry the signals between the two devices, and the printer passes them back up.

Teacher presses Print

Teacher’s laptop

  1. Application the word processor holds the document and asks for it to be printed
  2. Protocol agreed rules turn the document into a print job the printer understands, addressed to it
  3. Network interface card (NIC) turns the print job into signals: here, Wi-Fi radio waves

Transmission media radio waves and cables carry the signals; the devices they pass through come later in the lesson

Staff-room printer

  1. Application the printer’s own software prints the worksheet on paper
  2. Protocol the same rules, used to read the print job
  3. Network interface card (NIC) turns the signals back into the print job

Follow the print job

  1. The word processor hands the document to the printing protocol.
  2. The protocol turns it into a print job and addresses it to the printer.
  3. The laptop’s NIC turns the print job into radio signals.
  4. The media carry the signals across to the printer.
  5. The printer’s NIC turns the signals back into the print job, its protocol reads it, and its software prints the worksheet on paper.

Remove any one element and nothing prints. With the wrong protocol, the printer prints symbols.

What this diagram doesn’t show. The diagram shows the four elements every network conversation needs: an application that creates or uses the data, a protocol that sets the rules for exchanging it, a network interface card that turns it into signals and back, and transmission media, the cables or radio waves, that carry those signals. Real devices follow several protocols at once, each doing a different part of the job: one for the print job itself, for example, and others for addressing and delivering it. A later lesson, Network Models, sorts protocols into groups. For now, the four elements are enough: each one has to work for two devices to communicate.

Discover

Network interface cards

In the school office, the desktop computer has a network cable plugged into the back. The teacher’s laptop has no cable at all, yet it is on the same school network.

Think it through

An office computer has a network cable plugged into it. A teacher’s laptop has no cable at all. Both are on the same school network. What must each device have inside it so that it can send and receive data, and how does each one reach the network?

Show what happens

Each device has a network interface card (NIC): the hardware that connects it to a network. Despite the name, it is usually built in rather than a separate card. The office computer’s NIC has a connector for a network cable and sends its signals along the cable. The laptop’s NIC sends and receives radio waves through a small aerial inside the laptop.

Two ways onto the same network

A fictional school office. The office computer’s network interface card connects by cable to the main switch; the teacher’s laptop’s network interface card connects by Wi-Fi to the wireless access point. Both reach the same school network.

  • Office computer

    Wired network interface card

    turns data into electrical signals on a cable

    cable (Ethernet)

    Main switch

    joins the devices plugged into it

  • Teacher’s laptop

    Wi-Fi network interface card

    turns data into radio waves, sent and received by a built-in aerial

    radio waves (Wi-Fi)

    Wireless access point

    joins Wi-Fi devices to the cabled network

Many devices have both: a laptop often has a Wi-Fi network interface card and a connector for a cable.

The two kinds of connection have names. Ethernet is the standard way devices on a wired local network send data to each other along cables. Wi-Fi is the standard way they do it by radio. A device connected either way can talk to a device connected the other way, because both follow the same rules for the conversation itself.

Think it through

Many devices are plugged into the school’s main switch. When a print job arrives for the printer, the switch has to send it to the printer and to no other device. What could the switch use to tell the printer’s network interface card apart from all the others?
Show the answer

Answer: B. A unique identifying number built into each network interface card.

Each NIC has its own identifying number, called a MAC address, used to deliver data to the right device within the local network. It is usually written as six pairs of characters, such as 3c:22:fb:1a:07:9e. It can be changed in software, so it identifies a network card on the local network but is not proof of who is using it. Ethernet Switching and MAC Addresses explains how a switch learns which MAC address is behind each of its connections.

Check your understanding

A teacher’s laptop works normally on the school Wi-Fi. When it is plugged into a network cable instead, it cannot reach anything, although the same cable and switch work for other computers. Which part of the laptop is most likely at fault?
Show the answer

Answer: B. Its wired network interface card.

The wired network interface card. Everything the cable connection shares with working computers is fine, and the laptop’s Wi-Fi card works, so the fault is in the part only the cable connection uses.

In short: the NIC is where data leaves and enters a device, the cable or radio waves are how it travels, and the MAC address is how the local network tells one NIC from another.

Discover

Devices, services and communication

The office computer and the laptop are two devices on the school’s network. In a real school, the signals pass through other devices on the way, too.

Think it through

The staff-room printer is one device on a school’s network. Picture the rest of that network. What other devices would you expect to find, and what job does each one do?

Show what happens

Most answers fall into four kinds: the devices people use; computers that provide something to everyone else, such as the shared files; boxes that join the devices in the building together; and something that connects the school to the internet. The map below gives each kind its name.

A small school network: what is joined to what

A fictional school. Each device is drawn under the device it is joined to. Solid lines are cables and dashed lines are Wi-Fi, and each device says which. The router is at the top only because the internet line enters there.

  • The internetOther networks
    • by the internet lineSchool routerRouter
      • by cableMain switchSwitch
        • by cableSchool serverServershared files and email
        • by cableOffice computerEndpoint
        • by cableStaff-room printerEndpoint
        • by cableWireless access pointAccess point
          • by Wi-FiTeacher’s laptopEndpoint
          • by Wi-FiPupil’s tabletEndpoint
Endpoints
The devices people actually use: here the office computer, the printer, the laptop and the tablet. Phones are endpoints too.
Servers
Computers that provide something to the others: here the school’s shared files and email. A school website may run on a server too.
Wireless access point
Joins Wi-Fi devices to the cabled network, so the laptop and the tablet are part of the same school network as the printer.
Switch and router
Both join things together, but not the same things. The next step works out the difference by following data across the network.

A real school has many switches and access points, joined to one another. This map shows one of each.

Discover

Switches and routers

The school map has two boxes that join things together: the main switch and the router. Do they do the same job? The quickest way to find out is to follow data and see which one it passes through.

Think it through

In a school, the office computer and the office printer are both plugged into the main switch. The school’s router connects the school to the internet. When the office computer prints a letter on that printer, which device does the print job pass through on its way?
Show the answer

Answer: A. The main switch only: the print job stays inside the school network.

Only the main switch. The office computer and the printer are both on the school’s own network, so the print job has no reason to go to the router. The star diagram below shows the same school network more simply, so you can follow the route and then try a second journey that does need the router.

The school network as a star, with the main switch in the middle

The same fictional school network, drawn with every device joined straight to the main switch, except the laptop, which joins the wireless access point by Wi-Fi, and the internet, which joins the router.

The school network as a star, with the main switch in the middle: Internet joined to Router by the internet line; Router joined to Main switch by cable; Office computer joined to Main switch by cable; Printer joined to Main switch by cable; School server joined to Main switch by cable; Access point joined to Main switch by cable; Teacher’s laptop joined to Access point by Wi-Fi.InternetRouterOfficecomputerMainswitchPrinterSchoolserverAccesspointTeacher’slaptop
  • Solid line: cable
  • Dashed line: Wi-Fi
  • Double line: the internet line

A simplified picture. Real networks have more switches, joined to one another, and not every network is laid out like this.

Two journeys on the star diagram

  1. The office computer sends the print job. It leaves along the computer’s cable and reaches the main switch.
  2. The main switch passes it to the printer. The printer is plugged into the same switch, so the switch sends the print job down the printer’s cable. The job never leaves the school network, so the router plays no part.
  3. Now a different journey. The office computer opens a website, which is held on a computer somewhere on the internet. Which devices will the request pass through? Predict before you go on.
  4. The request leaves the office computer. It reaches the main switch, exactly as the print job did.
  5. The main switch delivers it to the router. The website is not on the school network, so the office computer addresses the request to the router, and the switch delivers it there.
  6. The router sends it out to the internet. The router joins the school network to another network, the internet, so the request can leave the school. The reply comes back the same way.

The two journeys show the difference.

  • A switch joins devices within one local network. In the school, the main switch connects the office computer, the printer, the server and the access point, and passes data between them. Data that stays inside the school network passes through switches, and through an access point for Wi-Fi devices, but not through the router.
  • A router joins one network to another. The school’s router connects the school network to the internet. Data passes through it only when it has to leave the school network, or arrives from outside.

How a computer knows whether a destination is on its own network or another one is explained in a later lesson, Classful Addressing, Subnet Masks and CIDR.

Check your understanding

A pupil’s tablet on the school Wi-Fi saves a file to the school server. The server is plugged into the main switch. Which statement about the file’s journey is accurate?
Show the answer

Answer: B. It passes through the access point and the switch, not the router.

The access point and the switch. The tablet and the server are both on the school network, so the file never needs the router, which only joins the school network to other networks.

At home, one box from the broadband provider is usually called “the router”. It is really several devices in one: a router that joins the home network to the internet, a small switch that cables plug into, and a wireless access point for Wi-Fi. That is why so many people think a switch and a router are the same thing.

In this lesson, switch and router name two different jobs: joining devices within one network, and joining networks to each other. Real devices can do more than one job. Some larger switches can also route between networks inside a big organisation, and a school may have several routers. What stays true is the job: data only needs routing when it moves from one network to another.

Predict

Following a print job

A teacher wants to print a worksheet from their laptop. The laptop is connected to the school’s Wi-Fi, and the printer is connected by cable to the main switch. Follow how the printing information travels from the laptop to the printer.

Think it through

A teacher’s laptop is on the school’s Wi-Fi, which reaches the main switch through a wireless access point. The staff-room printer is plugged into the same main switch by cable. When the teacher prints a worksheet, does the print job pass through the school router?
Show the answer

Answer: A. No: the laptop and the printer are both on the school’s own network.

No. The laptop and the printer are both on the school’s own network, and the access point and the switch are enough to join them. The route on the map below shows each step, including one the office computer did not need.

The result: the worksheet comes out of the printer, on paper, in the staff room. The print job used all four elements: the word processor, the printing protocol, two network interface cards and the radio waves and cables between them. It also needed two joining devices, the access point and the switch. It is one step longer than the office computer’s print job on the star diagram, because the laptop joins by Wi-Fi.

Change one fact. The teacher prints to a printer at another school in the same trust, across town. Now the print job has to leave one school’s network and enter another, so it passes through the school router, across the link between the schools, and through the other school’s router before it reaches a switch. Joining networks is the router’s job.

Discover

Hosts and nodes

On its route, the print job passed through four devices: the laptop, the access point, the switch and the printer.

Think it through

A print job travels from a teacher’s laptop, through a wireless access point and a switch, to a printer. Which of these four devices used the print job, and which only passed it along?

Show what happens

The laptop created the print job and sent it; the printer received it and used it to print the worksheet. The access point and the switch only passed it along.

Two words describe the part a device plays.

  • A node is any device connected to a network. All four devices on the route are nodes, and so are the server and the router.
  • A host is a device on a network that sends or receives data for its own use. For example, a laptop sends a document to a printer, and the printer receives the information it needs to print it. Both are hosts, and so is the server.

Every host is a node, but not every node is a host. In this example, the switch and the wireless access point mainly forward traffic between other devices, so we treat them as network nodes rather than the hosts involved in the print job. (Some switches and access points do send and receive a little data of their own, for example when a technician manages them, but on the print job’s route they only pass data along.)

Every host is a node, but not every node is a host

The devices from the school map, sorted by the part they played in the print job and the website request. Hosts are drawn inside nodes, because every host is also a node.

Nodes

Every device connected to the network.

Hosts also nodes

Devices that send or receive data for their own use.

  • Teacher’s laptop
  • Pupil’s tablet
  • Office computer
  • Staff-room printer
  • School server

Only nodes, not hosts:

  • Main switch
  • Wireless access point
  • School router

Sorted by what each device did in this lesson’s journeys. A device’s part can change: a switch that a technician manages sends and receives a little data of its own.

Check your understanding

A school’s security camera records video of the car park and sends it, over the network, to the school server to be stored. Nobody sits at the camera or types on it. Is the camera a host?
Show the answer

Answer: B. Yes: it sends data it created, its video, so it is a host.

Yes. A host sends or receives data for its own use, and the camera sends video it recorded itself. Hosts are not only the computers people use: cameras, printers and many other devices are hosts too. What matters is whose data it is.

Predict

Network scope

Networks are also described by how much ground they cover.

Think it through

Your phone and its wireless headphones form a tiny network. A company joining its offices in three countries forms a huge one. What other sizes of network can you think of between those two?

Show what happens

Between the two come the network inside one building or site, such as the school’s, and one that joins buildings across a city. Each size has a name, in the table below.

ScopeMeaningIllustrative example
PANPersonal Area NetworkA phone and Bluetooth headphones
LANLocal Area NetworkSchool computers and printers, wired or wireless
MANMetropolitan Area NetworkConnected buildings across a city
WANWide Area NetworkOffices connected across regions or countries

The labels describe scale, from a personal area network around one person, through a metropolitan area network across a city, to a wide area network spanning regions. They are general descriptions, not fixed distance limits: no distance rule turns one into the next. Networks of one scope are often joined by a larger one, as two schools’ LANs can be joined across a city, and the internet is a global network of networks.

Discover

Networks and security

Networks are how most data reaches most devices, so they matter to anyone protecting those devices. Being connected to a network and being allowed to use what is on it are not the same thing.

Think it through

A visitor plugs their own laptop into a spare network point in the wall of an empty room at the school, and the laptop joins the school network. Does that mean the visitor can now open the files on the school server?
Show the answer

Answer: B. Not necessarily: the laptop has a route, but access is a separate check.

Not necessarily. A network connection gives a route to the server; it does not establish that access is authorised. Before the server lets anyone open a file, it checks who is asking, usually with a username and password, and what that person is allowed to open. Protecting a service means considering its data, its software, its devices and its connections.

Think it through

A visitor’s laptop has joined the school network through a spare network point, but it cannot open any files on the server. What could still go wrong, for the school or for the people using its network?

Show what happens

Quite a lot. Some basic network security risks:

  • Unknown devices on the network. A device nobody has checked may carry harmful software that tries to spread to other devices on the same network.
  • A route for attackers. Every connected device is a possible way in, and so is the school’s link to the internet through the router. That is why networks are a major attack surface.
  • Data seen on the way. Someone who can reach the cables or radio waves may be able to read or change data as it travels, unless it is protected.
  • The wrong people joining. A spare network point, or a Wi-Fi password that has been shared too widely, lets devices join that should not.

Later lessons show the defences: checking who is asking, dividing networks so that a stray device reaches less, and protecting data as it travels.

Think it through

A school keeps its exam papers on a computer that is never connected to any network, wired or wireless. Can that computer still be attacked?
Show the answer

Answer: B. Yes: something carried to it, such as an infected USB drive, can attack it.

Yes. Networks are a major attack surface, but an isolated computer can still face threats: an infected USB drive, for example, carries harmful software to it by hand. Keeping a computer off the network removes one route, not every route.

Check your understanding

A school gives visitors their own Wi-Fi network, kept separate from the network that staff computers and the school server use. What is the main reason for keeping it separate?
Show the answer

Answer: C. Unchecked visitor devices then have no route to staff devices and servers.

Unchecked visitor devices have no route to staff devices and servers. Separating the networks does not replace the server’s own checks; it removes the route, so a device that nobody has checked cannot even try to reach them.

Apply

Apply it in a new situation

These questions use the lesson in situations it has not shown. For the strongest test of your understanding, come back to them on another day and answer each one at the first attempt.

Apply it

A teacher’s tablet is on the school Wi-Fi. Every other app on it works, including email and the web, but the printing app cannot find the printer. Which of the four elements is most likely at fault?
Show the answer

Answer: B. The application, or its settings.

The application or its protocol settings. The network interface card and the Wi-Fi are shared with apps that work, so the fault is most likely in what is different: the printing app, or the printing rules it is set up to use.

Many support problems are network problems in disguise. Asking which of the four elements is failing, the application, the protocol or its settings, the network interface card, or the cable or wireless link, is a quick way to narrow down why a device cannot reach a printer, a shared drive or the internet. Start with what still works: anything it shares with the failing task is probably fine.

Apply it

A fictional company joins its offices in Leeds and Madrid into one network. Someone calls the whole thing a LAN, because each office has a local network. What is the better description?
Show the answer

Answer: B. Two LANs joined by a WAN.

Two local area networks joined by a wide area network. Scope describes scale, and several LANs can be connected through a WAN.

Check

Check your understanding

These questions come from the approved revision bank. Choose an answer and check it; the explanation and its sources follow.

  1. Which device connects devices within the local network?

    Show answer

    Answer: Switch

    Switches connect local devices, and routers connect the private network to external networks.

    Revision sources: Study Buddy — 9 September 2026 (Study Buddy session (supplementary))

  2. A council links networks in buildings across one city. Which scope label best describes this arrangement?

    Show answer

    Answer: MAN

    MAN describes metropolitan scope. PAN is personal, LAN describes a local environment, and WAN generally spans wider regions. These categories are not fixed distance thresholds.

    Revision sources: Session 5: Networking Fundamentals — Part 1 (Classroom session record)

  3. Every cyberattack requires the target computer to have a network connection.

    Show answer

    Answer: False

    False. An infected USB drive can affect an isolated computer. Networks are a major attack surface, but their absence does not eliminate every attack path.

    Revision sources: Session 5: Networking Fundamentals — Part 1 (Classroom session record)

Study and revision

Use the Networking & Protocols topic for reviewed scope and sources, or practise with its questions and flashcards. The questions cover selected points from this module and do not test every detail in its lessons. They are learning-only: none has been verified against an examination.

Consolidate

What to remember

  • A network is devices that communicate using agreed rules, called protocols; a connection alone is not enough.
  • Four elements: an application, a protocol, a network interface card, and the media that carry the signals.
  • A network interface card connects a device by cable (Ethernet) or by radio (Wi-Fi), and its MAC address tells it apart on the local network.
  • Switches join devices within a network; routers join networks to each other. Data only needs a router when it leaves its own network.
  • Every host is a node, but not every node is a host: hosts send or receive data for their own use.
  • PAN, LAN, MAN and WAN describe scale, not fixed distances.
  • A connection gives a route, not permission, and every connected device is a possible way in.

Key terms

Node

Any device or connection point that participates in a network.

Glossary entry

Host

An endpoint that sends or receives data on a network. Hosts are nodes, but not every node is an end host.

Glossary entry

Protocol

An agreed set of rules for how data is formatted, transmitted and interpreted so that devices can communicate.

Glossary entry

NIC (Network Interface Card)

Hardware that connects a device to a network medium and provides Physical and Data Link layer functions.

Glossary entry

LAN (Local Area Network)

A network covering a local area such as a home, office or building. Network scopes are general descriptions, not fixed distance limits.

Glossary entry

Switch

A device that connects devices within a local network and forwards Ethernet frames using the MAC addresses it has learned.

Glossary entry

Router

A device that forwards traffic between networks, for example between a private local network and the internet.

Glossary entry

Common misunderstandings

The internet is one very large network of networks. A single home, office or school has its own local network, whether or not it is connected to the internet. The print jobs in this lesson never used the internet.

A switch joins devices within one network; a router joins one network to another. A home broadband box does both, and is also a Wi-Fi access point, which is why the two are easily confused.

A Wi-Fi laptop can reach a printer or server connected by cable. What they need is to follow the same rules for the conversation, not identical cables or radios.

A host is any device that sends or receives data for its own use: a printer or a security camera is a host. A switch or an access point that only passes data on is a node but not a host.

A connection gives a route. Servers and other services still check who is asking and what they may use.

Networks are a major attack surface, but an infected USB drive can compromise an isolated computer.

Further reading

Where to go next in this module:

Lesson sources and acknowledgements

Sources and scope

This overview brings together the foundations recorded in Session 5: Networking Fundamentals — Part 1 and the earlier Study Buddy networking discussion. The linked walkthroughs develop the additional educational explanations from my ChatGPT note-taking discussion. They are not verbatim tutor quotations or records of completed configuration labs.

  • Taught in Session 5: the definition of a network, hosts and nodes, the four basic elements, protocols as a shared language, NICs and the four network scopes.
  • From the Study Buddy session on 9 September: the roles of switches, routers, servers and endpoints in an organisation’s network.
  • Supplementary explanation: the four-elements diagram, the school picture of the four kinds of device, the print-job example with its variation, and the misunderstandings. The print job is fictional.
  • Guided version (approved by the site owner, published 1 November 2026): the printer that prints symbols and the telephone comparison, the four-elements diagram drawn as one print job, the two kinds of network interface card and the MAC address question, the school network map, the star diagram and its two traced journeys, the print job’s traced route, the hosts-and-nodes diagram, the security camera, the home router box and the note on real devices, the visitor’s laptop, the network security risks, the unconnected exam computer and the visitors’ Wi-Fi, the tablet and two-office examples, every question asked in the lesson with its feedback and hints, and the closing summary are supplementary explanation written for the Study Guide. The settings are fictional. The questions in the lesson’s steps are not revision-bank items; those in “Check your understanding” are, unchanged.
  • No practical work is claimed. The Study Buddy introduction to linked switches does not establish practical trunk configuration or segmentation experience.

Taught in classroom sessions

From Study Buddy sessions

Related lessons

Terms in this lesson

Practise this lesson

Quiz these topicsFlashcards