Saturday, October 31, 2026

Solid Geometry| 3D Shapes, Faces, Edges & Vertices – Complete Mathematics Tutorial

Solid Geometry: 3D Shapes, Faces, Edges and Vertices – Complete Guide

Welcome to our Solid Geometry tutorial!

Have you ever wondered how many faces, edges and vertices a dice has? What about a football, a water bottle or a pyramid?

All these objects are related to an important branch of mathematics called Solid Geometry.

In this lesson, we will explore seven important three-dimensional (3D) solids, understand their properties, identify their faces, edges and vertices, and learn how these geometric shapes are used in everyday life.

This tutorial is designed to help students understand solid geometry easily through simple explanations, examples, comparison tables and practice questions.

1. What Is Solid Geometry?

Solid Geometry is a branch of mathematics that deals with three-dimensional objects. These objects have length, width and height.

Unlike two-dimensional (2D) shapes, such as squares, rectangles and circles, three-dimensional solids occupy space and have volume.

Examples of three-dimensional objects include:

  • A dice – Cube
  • A book – Cuboid
  • A football – Sphere
  • A tin can – Cylinder
  • An Egyptian pyramid – Square Pyramid
  • A triangular package – Triangular Prism

Understanding the properties of solids helps us recognise and describe objects in our surroundings.

2. Important Properties of Solid Shapes

To understand solid geometry, we must first learn three important mathematical terms: faces, edges and vertices.

2.1 Faces

A face is a surface of a three-dimensional solid. It may be a flat surface or, when discussing curved solids, a curved surface.

For example, a cube has six flat square faces.

2.2 Edges

An edge is the line or boundary where two flat faces meet.

For example, a cube has twelve edges.

2.3 Vertices

A vertex is a corner point where two or more edges meet. The plural form of vertex is vertices.

For example, a cube has eight vertices.

Remember these three important terms:
  • Face: Surface of a solid.
  • Edge: Boundary where two flat faces meet.
  • Vertex: Corner point where edges meet.

3. Types of Three-Dimensional Solids and Their Properties

Now, let's study seven important three-dimensional solids individually.

3.1 Cube

Cube

What Is a Cube?

A cube is a three-dimensional solid with six equal square faces. All its edges have the same length.

Every face of a cube is a square, and all the angles between adjacent faces are right angles (90 degrees).

Properties of a Cube:

  • Number of faces: 6
  • Number of edges: 12
  • Number of vertices: 8
  • All six faces are equal squares.
  • All twelve edges have equal lengths.
Cube – Important Properties
PropertyNumber
Faces6
Edges12
Vertices8

Real-life examples:

  • Dice
  • Rubik's Cube
  • Ice cubes
  • Cube-shaped gift boxes

Mathematical formula:

If the length of one edge is a, the volume of a cube is:

Volume = a × a × a = a³

3.2 Cuboid

Cuboid

What Is a Cuboid?

A cuboid is a three-dimensional solid with six rectangular faces.

Opposite faces of a cuboid are equal in shape and size. Its length, width and height do not need to be equal.

A cube is a special type of cuboid in which all six faces are equal squares.

Properties of a Cuboid:

  • Number of faces: 6
  • Number of edges: 12
  • Number of vertices: 8
  • All faces are rectangles.
  • Opposite faces are equal and parallel.
  • All angles between adjacent faces are 90 degrees.
Cuboid – Important Properties
PropertyNumber
Faces6
Edges12
Vertices8

Real-life examples:

  • Bricks
  • Books
  • Matchboxes
  • Rectangular boxes
  • Refrigerators

Mathematical formula:

If length = l, width = w and height = h:

Volume = l × w × h

3.3 Tetrahedron

Tetrahedron

What Is a Tetrahedron?

A tetrahedron is a three-dimensional solid with four triangular faces.

A regular tetrahedron has four equal equilateral triangular faces. All its edges have the same length.

Properties of a Tetrahedron:

  • Number of faces: 4
  • Number of edges: 6
  • Number of vertices: 4
  • All faces of a regular tetrahedron are equal equilateral triangles.
  • Three edges meet at each vertex.
Tetrahedron – Important Properties
PropertyNumber
Faces4
Edges6
Vertices4

Real-life examples:

  • Tetrahedron-shaped decorative objects
  • Some molecular structures
  • Four-sided triangular models

Important: A tetrahedron is also known as a triangular pyramid. A regular tetrahedron is a special case in which all four faces are equal equilateral triangles.

3.4 Square Pyramid

Square Pyramid

What Is a Square Pyramid?

A square pyramid is a three-dimensional solid with one square base and four triangular side faces.

All four triangular side faces meet at one point at the top, called the apex.

Properties of a Square Pyramid:

  • Number of faces: 5
  • Number of edges: 8
  • Number of vertices: 5
  • One face is a square.
  • Four faces are triangles.
  • Four edges form the square base.
  • Four sloping edges connect the base vertices to the apex.
Square Pyramid – Important Properties
PropertyNumber
Faces5
Edges8
Vertices5

Real-life examples:

  • Egyptian pyramids
  • Pyramid-shaped decorative objects
  • Square pyramid roof structures

Important terms:

  • Base: The square bottom face.
  • Apex: The top point of the pyramid.
  • Sloping edges: Edges joining the base vertices to the apex.

3.5 Sphere

Sphere

What Is a Sphere?

A sphere is a perfectly round three-dimensional solid. Every point on its surface is at the same distance from its centre.

This distance is called the radius of the sphere.

Unlike cubes and pyramids, a sphere has no flat faces, straight edges or vertices.

Properties of a Sphere:

  • Number of curved surfaces: 1
  • Number of edges: 0
  • Number of vertices: 0
  • It has one continuous curved surface.
  • It has a centre and a radius.
Sphere – Important Properties
PropertyNumber
Curved surfaces1
Edges0
Vertices0

Real-life examples:

  • Football
  • Basketball
  • Marbles
  • Globe
  • Round decorative balls

Mathematical formulas:

  • Volume = (4/3) × π × r³
  • Surface area = 4 × π × r²

Here, r represents the radius and π is approximately 3.14159.

3.6 Cylinder

Cylinder

What Is a Cylinder?

A cylinder is a three-dimensional solid with two equal and parallel circular flat faces and one curved surface.

The two circular faces are located at the top and bottom of the cylinder.

Properties of a Cylinder:

  • Number of flat faces: 2
  • Number of curved surfaces: 1
  • Number of edges: 2
  • Number of vertices: 0
  • The two circular faces are equal and parallel.
  • The two circular edges are formed where the curved surface meets the circular faces.
Cylinder – Important Properties
PropertyNumber
Flat faces2
Curved surfaces1
Edges2
Vertices0

Real-life examples:

  • Tin cans
  • Water pipes
  • Drinking glasses with cylindrical shapes
  • Some water bottles
  • Cylindrical containers

Mathematical formulas:

  • Volume = π × r² × h
  • Total surface area = 2πr(r + h)

Here, r is the radius of the circular base and h is the height of the cylinder.

3.7 Prism – Triangular Prism

Prism

What Is a Prism?

A prism is a three-dimensional solid with two equal and parallel polygonal bases. Its side faces are parallelograms. In a right prism, the side faces are rectangles.

Prisms are named according to the shape of their bases.

Examples include:

  • Triangular prism
  • Square prism
  • Pentagonal prism
  • Hexagonal prism

Triangular Prism

A triangular prism has two equal and parallel triangular bases and three rectangular side faces (in a right triangular prism).

Properties of a Triangular Prism:

  • Number of faces: 5
  • Number of edges: 9
  • Number of vertices: 6
  • Two faces are triangles.
  • Three side faces are rectangles in a right triangular prism.
  • Three edges belong to each triangular base.
  • Three additional edges connect the corresponding vertices of the bases.
Triangular Prism – Important Properties
PropertyNumber
Faces5
Edges9
Vertices6

Real-life examples:

  • Triangular chocolate packaging
  • Triangular roof structures
  • Triangular prism-shaped decorative objects
  • Some optical prisms

Important: A triangular prism is different from a triangular pyramid. A triangular prism has two triangular bases, whereas a triangular pyramid has only one triangular base and one apex.

4. Comparison of All Seven Solids

Now let's compare the properties of all seven solids in one table. This is an important revision table for students preparing for mathematics examinations.

Solid Faces / Surfaces Edges Vertices
Cube6128
Cuboid6128
Tetrahedron464
Square Pyramid585
Sphere1 curved00
Cylinder2 flat + 1 curved20
Triangular Prism596

Note: The sphere and cylinder have curved surfaces. Some textbooks count only flat surfaces as faces. Therefore, follow the terminology used in your school textbook or examination question.

5. Important Differences Between Similar Solids

5.1 Cube and Cuboid

CubeCuboid
All six faces are equal squares.Faces are rectangles.
All twelve edges are equal.Edges may have different lengths.
Length, width and height are equal.Length, width and height may differ.
6 faces, 12 edges, 8 vertices.6 faces, 12 edges, 8 vertices.

5.2 Tetrahedron and Triangular Prism

TetrahedronTriangular Prism
4 triangular faces.2 triangular and 3 rectangular faces in a right prism.
6 edges.9 edges.
4 vertices.6 vertices.
One triangular base and one apex.Two equal parallel triangular bases.

5.3 Sphere and Cylinder

SphereCylinder
One continuous curved surface.Two flat circular faces and one curved surface.
No edges.Two circular edges.
No vertices.No vertices.
Example: Football.Example: Tin can.

6. Important Mathematical Relationship – Euler's Formula

For a convex polyhedron, there is an important mathematical relationship between the number of faces, edges and vertices. It is known as Euler's Formula.

Euler's Formula

F + V = E + 2

Where:

  • F = Number of faces
  • V = Number of vertices
  • E = Number of edges

Example: Applying Euler's Formula to a Cube

For a cube:

  • Faces (F) = 6
  • Vertices (V) = 8
  • Edges (E) = 12

Substituting these values:

F + V = E + 2

6 + 8 = 12 + 2

14 = 14

Therefore, Euler's formula is satisfied.

This formula applies to convex polyhedral such as cubes, cuboids, pyramids and prisms. It does not directly apply to curved solids such as spheres and cylinders.

7. Quick Revision Notes

Use these short notes to revise the properties of solids quickly before an examination.

  • Cube: 6 faces, 12 edges and 8 vertices.
  • Cuboid: 6 faces, 12 edges and 8 vertices.
  • Tetrahedron: 4 triangular faces, 6 edges and 4 vertices.
  • Square Pyramid: 5 faces, 8 edges and 5 vertices.
  • Sphere: 1 curved surface, 0 edges and 0 vertices.
  • Cylinder: 2 flat faces, 1 curved surface, 2 edges and 0 vertices.
  • Triangular Prism: 5 faces, 9 edges and 6 vertices.
Easy way to remember:

Face = Surface | Edge = Boundary | Vertex = Corner

8. Test Your Knowledge – Solid Geometry Quiz

Let's check how well you understand the properties of three-dimensional solids. Try to answer the following questions before checking the correct answers.

Question 1

How many faces does a cube have?

  • A. 4
  • B. 6
  • C. 8
  • D. 12
  • Correct Answer: B – 6

Question 2

Which solid has zero edges and zero vertices?

  • A. Cube
  • B. Cuboid
  • C. Sphere
  • D. Square Pyramid
  • Correct Answer: C – Sphere

Question 3

How many edges does a triangular prism have?

  • A. 6
  • B. 8
  • C. 9
  • D. 12
  • Correct Answer: C – 9

Question 4

How many vertices does a square pyramid have?

  • A. 4
  • B. 5
  • C. 6
  • D. 8
  • Correct Answer: B – 5

Question 5

Which solid has four triangular faces?

  • A. Cube
  • B. Tetrahedron
  • C. Cylinder
  • D. Cuboid
  • Correct Answer: B – Tetrahedron

9. Conclusion

Solid Geometry is an important topic in mathematics that helps us understand the three-dimensional shapes around us.

In this lesson, we explored seven important solids:

  • Cube
  • Cuboid
  • Tetrahedron
  • Square Pyramid
  • Sphere
  • Cylinder
  • Triangular Prism

We learned how to identify their faces, edges and vertices, understand their properties and recognize examples from everyday life.

Remember that mathematics is not just about numbers. It is also about understanding the shapes and structures around us.

Keep practicing, keep exploring and keep learning!

10. Frequently Asked Questions (FAQ)

What is solid geometry?

Solid geometry is the branch of mathematics that studies three-dimensional objects with length, width and height.

What is the difference between a face, an edge and a vertex?

A face is a surface, an edge is the boundary where two flat faces meet, and a vertex is a corner point where edges meet.

How many faces, edges and vertices does a cube have?

A cube has 6 faces, 12 edges and 8 vertices.

How many faces does a tetrahedron have?

A tetrahedron has four triangular faces, six edges and four vertices.

Does a sphere have edges or vertices?

No. A sphere has one continuous curved surface, zero edges and zero vertices.

How many edges does a cylinder have?

A cylinder has two circular edges, where its curved surface meets its two circular flat faces.

What is the difference between a pyramid and a prism?

A pyramid has one polygonal base and triangular side faces that meet at an apex. A prism has two equal and parallel polygonal bases connected by side faces.

What is Euler's formula for solid geometry?

For a convex polyhedron, Euler's formula is F + V = E + 2, where F represents faces, V represents vertices and E represents edges.

Learn More and Practice

To improve your understanding of solid geometry, practice identifying three-dimensional objects around you. Count their faces, edges and vertices and compare your answers with the revision table in this lesson.

Watch the related Solid Geometry video tutorial, revise the examples and attempt the quiz to strengthen your mathematical knowledge.

Solid Geometry – Learn, Understand, Practice and Succeed!

Solid Geometry 3D Shapes

Friday, October 23, 2026

Spoofing and Phishing Explained: Types, Real-Life Examples, Dangers & Prevention | Cybersecurity Guide

Spoofing and Phishing: Types, Examples, Dangers and Prevention

Spoofing and phishing are common cybersecurity threats used to deceive people, steal sensitive information, access accounts, and commit online fraud. Attackers may pretend to be trusted people, organizations, websites, email addresses, or computer systems to make their actions appear genuine.

In this detailed tutorial, you will learn the meanings of spoofing and phishing, how they work, their different types, practical examples, warning signs, prevention methods, and the actions to take if you become a victim. This guide is suitable for ICT students, computer users, teachers, and anyone who wants to improve online safety.

1. What Is Cybersecurity?

Cybersecurity is the practice of protecting computers, mobile devices, networks, applications, and digital information against unauthorized access, damage, theft, and cyberattacks.

Cybersecurity includes technical measures, such as firewalls and antivirus software, as well as safe user behaviour, such as checking website addresses and protecting passwords.

Examples of cybersecurity practices include:

  • Using strong and unique passwords.
  • Enabling multi-factor authentication.
  • Installing security updates.
  • Using trusted websites and applications.
  • Recognizing suspicious messages, links, and attachments.
  • Protecting personal and financial information.

2. What Is Spoofing?

Spoofing is a cyberattack technique in which an attacker falsifies or disguises an identity, address, communication source, or other identifying information to make it appear trustworthy.

The attacker attempts to make a person, device, or computer system believe that the communication or data comes from a legitimate source when it may actually come from an attacker.

Simple example: A person receives an email that appears to come from their bank. The displayed sender name and address look familiar, but the message was sent by someone attempting to steal banking information.

In this example, the attacker uses email spoofing to make the message appear genuine.

Why Do Attackers Use Spoofing?

  • To impersonate trusted people or organizations.
  • To make fraudulent emails, calls, or websites appear legitimate.
  • To redirect users to malicious websites.
  • To hide or misrepresent the source of network traffic.
  • To support phishing, fraud, malware distribution, or other cyberattacks.
  • To bypass trust-based security checks when those checks are weak or incorrectly configured.

3. Main Types of Spoofing

3.1 Email Spoofing

Email spoofing occurs when an attacker forges the sender information of an email so that it appears to come from another person, company, institution, or organization.

Example: An employee receives an email that appears to come from the company director. The message asks the employee to transfer money urgently to a new bank account.

The sender's displayed address may look familiar, but the message could be fraudulent. Attackers may use email spoofing to request money, steal credentials, or deliver malicious attachments.

Prevention:

  • Check the complete sender address, not only the displayed name.
  • Be careful with unexpected requests for money or confidential information.
  • Confirm unusual financial requests using a separate, trusted communication channel.
  • Avoid opening unexpected attachments or clicking suspicious links.
  • Organizations should configure and monitor SPF, DKIM, and DMARC email authentication.

3.2 Caller ID Spoofing

Caller ID spoofing occurs when a caller deliberately changes the telephone number or identity displayed on the recipient's phone.

Example: A person receives a call that appears to come from a bank or government office. The caller claims there is a problem with the person's account and requests a password, PIN, or one-time password (OTP).

The displayed number alone does not prove that the caller is genuine. Caller ID information can be falsified, and a legitimate organization should not need a customer to disclose their account password or OTP.

Prevention:

  • Never share passwords, PINs, or OTPs with callers.
  • End suspicious calls and contact the organization using its official number.
  • Do not rely only on a displayed telephone number.
  • Be suspicious of threats, pressure, and demands for immediate payment.

3.3 Website Spoofing

Website spoofing occurs when an attacker creates or manipulates a website to make it resemble a legitimate website, such as a bank, shopping platform, email service, or government portal.

Example: A fraudulent website copies the design of a genuine online banking page. A user enters their username, password, and other confidential details, which are then collected by the attacker.

A fake website may use a domain name that resembles the real address. For example, an attacker may register a lookalike domain containing an extra letter or a misleading word.

Prevention:

  • Type important website addresses directly into the browser.
  • Check the domain name carefully before entering personal information.
  • Use saved bookmarks for frequently visited financial services.
  • Remember that HTTPS and a padlock indicate an encrypted connection, not proof that a website is trustworthy.
  • Never enter login details after following an unexpected or suspicious link.

3.4 IP Spoofing

IP spoofing is a technique in which an attacker forges the source IP address in network packets. The forged address makes the traffic appear to originate from another device or network address.

Example: An attacker sends network packets with a falsified source IP address to disguise the actual origin of the traffic or to support a denial-of-service attack.

IP spoofing is commonly associated with certain network attacks, including some distributed denial-of-service (DDoS) attacks. It can also complicate the identification of the true traffic source.

Prevention and protection:

  • Use firewalls and appropriately configured network security devices.
  • Apply ingress and egress filtering where appropriate.
  • Use anti-spoofing controls supported by network infrastructure.
  • Monitor unusual traffic patterns and investigate suspicious activity.
  • Use secure network architecture and updated equipment.

3.5 DNS Spoofing

DNS spoofing occurs when false Domain Name System (DNS) information causes a device to receive an incorrect mapping between a domain name and an IP address.

The Domain Name System normally helps translate human-readable domain names into IP addresses used by computers to communicate.

Example: A user enters the address of a familiar website, but manipulated DNS information directs the browser to a fraudulent server that imitates the original website.

Prevention:

  • Use trusted DNS resolvers and secure network configurations.
  • Keep operating systems, routers, and applications updated.
  • Use DNS security measures, such as DNSSEC validation, where supported and appropriate.
  • Avoid untrusted public Wi-Fi networks for sensitive transactions unless using suitable protection.
  • Contact the network administrator if suspicious redirects continue.

4. What Is Phishing?

Phishing is a social engineering attack in which a criminal attempts to trick a person into revealing sensitive information, clicking a malicious link, downloading harmful software, or authorizing a fraudulent transaction.

Phishing messages often pretend to come from trusted organizations, such as banks, delivery services, online shopping platforms, schools, employers, or technology companies.

Example: A person receives an email saying that their account will be suspended unless they verify their identity immediately. The email contains a link to a fake login page that collects their username and password.

Phishing depends on deception and often uses fear, urgency, curiosity, or attractive offers to influence a person's decision.

Why Is Phishing Dangerous?

  • It can steal usernames and passwords.
  • It can expose banking and payment information.
  • It may install malware or ransomware.
  • It can give attackers access to email and social media accounts.
  • It may lead to identity theft or financial loss.
  • It can expose confidential personal, educational, or business information.

5. Main Types of Phishing

5.1 Email Phishing

Email phishing uses fraudulent emails to persuade recipients to click links, open attachments, provide sensitive information, or make payments.

Example: An email claims that a package cannot be delivered until the recipient pays a small fee through an unfamiliar link.

Safety tip: Check delivery information through the delivery company's official website or application instead of using the unexpected link.

5.2 Smishing (SMS Phishing)

Smishing is phishing conducted through SMS text messages or similar messaging services.

Example: A text message claims that a bank account has been blocked and asks the recipient to follow a link to restore access.

Safety tip: Do not follow suspicious text-message links. Open the official banking application or contact the bank using a trusted number.

5.3 Vishing (Voice Phishing)

Vishing is phishing carried out through telephone or voice communication. The attacker may impersonate a bank employee, technical support agent, police officer, or another trusted person.

Example: A caller claims that a payment is fraudulent and asks the victim to disclose an OTP to cancel it.

Safety tip: Do not disclose passwords, PINs, or OTPs. End the call and independently verify the claim through an official contact channel.

5.4 Spear Phishing

Spear phishing is a targeted phishing attack directed at a particular person, employee, or organization. The message may include personal or workplace details to appear convincing.

Example: An employee receives an email that appears to come from a manager and requests confidential company documents.

Safety tip: Verify sensitive requests independently, even when the message contains familiar names, job titles, or project details.

5.5 Fake Login Pages

A fake login page is a fraudulent webpage designed to imitate a genuine sign-in page and collect the information entered by visitors.

Example: A user follows a link from a fake email and enters the login details for an email account on a copied login page.

Safety tip: Check the complete domain name and access important accounts through a trusted bookmark or by typing the official address directly.

6. Spoofing vs. Phishing: Key Differences

Spoofing and phishing are related, but they do not mean exactly the same thing. Spoofing focuses on falsifying or disguising identity or source information. Phishing focuses on deceiving people into taking an unsafe action or disclosing information.

Feature Spoofing Phishing
Meaning Falsifying identity, source, address, or identifying information. Tricking people into revealing information or performing unsafe actions.
Main target People, devices, networks, or systems that trust the falsified information. People who may disclose information, click links, open files, or authorize transactions.
Common methods Email, caller ID, website, IP, and DNS spoofing. Fraudulent emails, text messages, phone calls, and fake login pages.
Main purpose Misrepresenting the source or identity of a communication or data. Stealing information, gaining access, delivering malware, or committing fraud.
Relationship Can be used as part of a phishing attack, but can also occur independently. Can use spoofing techniques to make the deception more convincing.
Example A forged sender address makes an email appear to come from a manager. The email asks an employee to reveal a password through a fake login page.
Remember: Spoofing is often about pretending to be a trusted source. Phishing is about using deception to make a person reveal information or take an unsafe action. One attack can involve both techniques.

7. Common Warning Signs of Spoofing and Phishing

Cybercriminals often make mistakes or use pressure tactics that can help you identify suspicious communications. However, some fraudulent messages are carefully written and may look professional.

  • Urgent threats: Messages claim that an account will be closed or blocked unless immediate action is taken.
  • Unexpected requests: A message asks for passwords, PINs, OTPs, payment details, or confidential files.
  • Suspicious links: A link uses a misleading domain name or directs you to an unfamiliar website.
  • Unexpected attachments: An email contains an attachment that you were not expecting.
  • Unusual payment requests: Someone requests gift cards, cryptocurrency, or a transfer to a new account.
  • Impersonation: A sender claims to represent a bank, employer, government office, or technology company.
  • Unexpected login alerts: A message asks you to sign in through a link to resolve an unfamiliar account problem.
  • Inconsistent information: The sender address, website domain, contact details, or request does not match what you expect.
  • Unusual communication style: The message contains strange wording or formatting. Remember that correct spelling and grammar do not guarantee safety.
Important: Do not decide whether a message is genuine based only on its appearance, logo, display name, or telephone number. Verify unexpected requests using an independent and trusted communication channel.

8. How to Prevent Spoofing and Phishing Attacks

8.1 Verify the Sender

Check the full email address, telephone number, and context of the message. A familiar display name does not prove that the sender is genuine. If a request seems unusual, contact the person or organization using contact details obtained independently.

8.2 Check Website Addresses Carefully

Before entering login or payment details, examine the domain name in the browser's address bar. Be cautious of extra letters, misspellings, unfamiliar subdomains, and misleading domain endings.

8.3 Avoid Suspicious Links and Attachments

Do not click links or open attachments in unexpected messages. If the message concerns a delivery, bank account, or online service, visit the official website or application directly.

8.4 Never Share Passwords, PINs, or OTPs

Keep authentication details private. Do not disclose your password, banking PIN, or one-time verification code to a caller or message sender. Treat unexpected requests for these details as suspicious.

8.5 Use Strong and Unique Passwords

Create long, unique passwords for different accounts. A password manager can help you generate and store them securely. Avoid reusing one password across email, banking, social media, and other services.

8.6 Enable Multi-Factor Authentication

Multi-factor authentication (MFA) adds an additional verification step when signing in. It can help protect an account even if a password is stolen. Use a phishing-resistant authentication method, such as a passkey or security key, where available.

8.7 Keep Software Updated

Install security updates for operating systems, browsers, mobile applications, routers, and security software. Updates can fix vulnerabilities that attackers may otherwise exploit.

8.8 Use Security Software and Network Protection

Use reputable security software, firewalls, spam filters, and browser protection features. These tools can reduce exposure to malicious websites, suspicious files, and unwanted communications, although they cannot detect every attack.

8.9 Verify Financial and Sensitive Requests

Before transferring money, changing payment details, sharing confidential documents, or approving an unusual request, confirm it through a separate trusted channel. For business payments, follow the organization's approved verification procedure.

8.10 Use Email Authentication for Organizations

Organizations that manage their own email domains should configure and maintain appropriate email authentication:

  • SPF (Sender Policy Framework): Specifies which mail servers are authorized to send email for a domain.
  • DKIM (DomainKeys Identified Mail): Uses a digital signature to help verify that an email is associated with an authorized domain and has not been altered in transit.
  • DMARC (Domain-based Message Authentication, Reporting and Conformance): Allows a domain owner to publish a policy for handling messages that fail specified authentication and alignment checks.

These controls can help reduce certain forms of domain spoofing, but they do not eliminate every fraudulent email. Users must continue to verify suspicious requests.

8.11 Be Careful on Public Wi-Fi

Avoid entering sensitive information on untrusted networks when possible. Use trusted websites and applications, keep your device updated, and use an organization-approved VPN when appropriate. A VPN does not make a fraudulent website trustworthy.

8.12 Report Suspicious Messages

Use the phishing-reporting option in your email or messaging service, notify your organization's IT or security team when relevant, and report suspected fraud to the appropriate service provider or local authority.

9. What to Do If You Become a Victim

If you have clicked a suspicious link, disclosed a password, entered banking details on a fake website, or installed an unexpected file, act quickly. The correct response depends on the information exposed and the device involved.

Step 1: Stop Interacting With the Suspicious Message

Do not continue using the suspicious website or communicating with the suspected attacker. Do not send further payments or disclose additional information.

Step 2: Change Compromised Passwords

From a trusted device, change the password for the affected account. If you reused the same password elsewhere, change it on those accounts too. Start with your email account because it may be used to reset other passwords.

Step 3: Secure Your Accounts

Enable MFA where possible, review active sessions, sign out unknown devices, remove unfamiliar recovery methods, and check for unauthorized changes to account settings.

Step 4: Contact Your Bank or Payment Provider

If you disclosed financial information or made a suspicious payment, contact your bank or payment provider immediately through an official channel. Ask about blocking affected cards, securing the account, disputing transactions, and other available protective steps.

Step 5: Check Your Device

If you opened a suspicious attachment or installed unknown software, use trusted security tools to check the device. Follow your organization's incident-response guidance if it is a work or school device. Seek technical assistance if you suspect malware or continuing unauthorized access.

Step 6: Report the Incident

Preserve relevant messages, sender details, transaction records, and screenshots where safe and appropriate. Report the incident to the affected service provider, your organization's security team, your bank if relevant, and the appropriate local authorities.

Step 7: Warn Affected Contacts

If your email or social media account has been compromised, inform contacts through another trusted channel. This can help prevent attackers from using your account to deceive other people.

Act immediately if money or account access is at risk. Contact your bank or service provider without delay. Do not pay someone who promises to recover stolen money or accounts without verifying their legitimacy.

10. Comparison of Spoofing Types and Phishing Types

Type How It Works Example Main Protection
Email spoofing Forges email sender information. A fake email appears to come from a manager. Verify the sender and use email authentication controls.
Caller ID spoofing Falsifies the number displayed during a call. A caller pretends to be a bank employee. Call back through an official number.
Website spoofing Imitates a genuine website. A fake banking login page. Check the domain and use a trusted bookmark.
IP spoofing Falsifies the source IP address in network packets. Traffic uses a forged source address. Use network filtering and anti-spoofing controls.
DNS spoofing Manipulates name-resolution information. A domain resolves to an unauthorized server. Use trusted DNS and appropriate DNS security.
Email phishing Uses fraudulent emails to trick recipients. A fake account-security warning. Verify independently before taking action.
Smishing Uses text messages to deceive recipients. A fake delivery-fee message. Verify through the official service.
Vishing Uses deceptive voice communication. A caller requests an OTP. Never disclose authentication codes.
Spear phishing Targets a particular person or organization. A fake message impersonates a manager. Verify sensitive requests through another channel.
Fake login page Collects information through a counterfeit sign-in page. A copied email-service login page. Use the official domain and phishing-resistant MFA.

11. Practical Cybersecurity Checklist

Use this checklist to improve your daily online safety:

  • Check the sender before trusting a message.
  • Verify suspicious requests independently.
  • Inspect website domains before entering sensitive information.
  • Avoid unexpected links and attachments.
  • Never disclose passwords, PINs, or OTPs.
  • Use strong, unique passwords.
  • Enable MFA or passkeys where available.
  • Install security updates promptly.
  • Use reputable security software and appropriate network protection.
  • Confirm changes to payment details before sending money.
  • Report suspicious messages and attempted fraud.
  • Know how to contact your bank and important service providers through official channels.

12. Frequently Asked Questions (FAQs)

What is the main difference between spoofing and phishing?

Spoofing involves falsifying or disguising identity or source information. Phishing involves deceiving people into revealing sensitive information or performing unsafe actions. Spoofing may be used to make a phishing attack more convincing.

Can spoofing happen without phishing?

Yes. For example, IP spoofing may be used in certain network attacks without trying to trick a person into revealing a password.

Can phishing happen without spoofing?

Yes. A phishing message can use a misleading offer or fraudulent request without technically forging the sender's identity. Spoofing is one possible technique, not a requirement for every phishing attack.

Does HTTPS guarantee that a website is safe?

No. HTTPS helps encrypt the connection between the browser and the website, but a fraudulent website can also use HTTPS. Always check the domain and verify that the website is the intended service.

Is it safe to trust a call because the number looks genuine?

No. Caller ID information can be spoofed. End suspicious calls and contact the organization through an independently verified telephone number.

What should I do if I enter my password on a fake website?

Change the compromised password immediately from a trusted device, change it on other accounts where it was reused, enable MFA, review account activity, and contact the service provider if you cannot secure the account.

Can antivirus software prevent all phishing attacks?

No. Security software can detect or block some threats, but it cannot identify every fraudulent message or website. Careful verification and safe user behaviour remain important.

What does MFA mean?

MFA stands for multi-factor authentication. It requires additional verification beyond a password, helping protect an account if the password is stolen. Phishing-resistant options, such as passkeys and security keys, offer stronger protection against many credential-stealing attacks.

13. Conclusion

Spoofing and phishing are important cybersecurity threats that affect individuals, businesses, educational institutions, and online services. Spoofing makes a communication or source appear different from what it really is, while phishing uses deception to persuade people to reveal information or take unsafe actions.

Understanding email spoofing, caller ID spoofing, website spoofing, IP spoofing, DNS spoofing, email phishing, smishing, vishing, spear phishing, and fake login pages helps users recognize common attack methods.

The most effective approach combines awareness, independent verification, strong authentication, software updates, suitable security controls, and prompt reporting. Think carefully before clicking a link, opening an unexpected attachment, sharing confidential information, or approving a payment.

Golden rule of cybersecurity: Stop, check, and verify before you trust. Never let urgency or fear force you into an unsafe online decision.

14. Further Reading and Trusted Resources

Use these established cybersecurity resources to learn more about spoofing, phishing, and online safety:

Educational content prepared for cybersecurity awareness and ICT learning. Examples are illustrative. Security controls should be selected and configured according to the needs of the individual or organization.

Cyber Security Video Explanation


Cyber Security| Spoofing and Phishing Tutorial

Tuesday, October 20, 2026

Complete Computer Networks Tutorial| LAN to WAN

Network Devices Connect Share Communicate

Computer Networks Tutorial: LAN to Internet 

Networking | Network Devices | LAN | WAN | Internet | Network Protocols | How the Web Works

Welcome to Computer Networking!

In this tutorial, we will learn how computers connect to one another, how networks are constructed, how data travels between devices, and how we access websites and other Internet services. Each concept is explained in simple English with practical examples and diagrams.

Who can learn? School students, O/L and A/L ICT students, beginners, and anyone interested in information technology.

Contents

1. What Is a Computer Network?

A computer network is a collection of two or more computing devices connected through communication links so that they can exchange data and share resources and services.

For example, when several computers in a school laboratory are connected to a switch, they can communicate with other devices on the network and may share a printer, files, or an Internet connection.

A Simple Computer Network

Computer A
↔
Network Link
↔
Computer B

The communication link may use Ethernet, fibre optics, or wireless technology.

Basic Terms

Node
A device or connection point on a network, such as a computer, printer, or router interface.
Host
A network-connected device that communicates using network protocols, such as a laptop or server.
Data
Information exchanged between devices, such as text, images, files, audio, and video.
Communication medium
The path through which data travels, such as a copper cable, fibre-optic cable, or radio signal.

2. Advantages of Computer Networks

Computer networks make communication, information sharing, and resource management easier.

  • Resource sharing: Several computers can use a shared printer or storage system.
  • File sharing: Users can share documents through a server or authorised network folder.
  • Communication: Users can send email, chat, and participate in video conferences.
  • Internet sharing: Multiple devices can access the Internet through a suitable network gateway.
  • Centralised management: Administrators can manage accounts, permissions, and network resources.
  • Backup: Important information can be backed up to central storage or another location.
  • Collaboration: Users can work together on shared documents and projects.
  • Remote access: Authorised users can access organisational resources from other locations.
  • Cost efficiency: Sharing suitable resources can reduce the need to purchase separate equipment for every user.

Example: A school can connect 30 computers to one network and provide access to a shared printer, educational server, and Internet connection.

Remember: Networking improves efficiency, but equipment, connectivity, security, maintenance, and administration still require proper planning.

3. Important Network Devices

A computer network uses different devices to connect equipment, forward data, provide services, and protect communications.

3.1 Switch

A network switch connects multiple devices within a local area network. In a typical Ethernet LAN, it forwards Ethernet frames using learned MAC address information.

Example: Four computers and a file server connect to five separate ports on a switch.

3.2 NIC — Network Interface Card

A NIC is the hardware interface that enables a device to communicate with a network. It may support a wired Ethernet connection or a wireless connection.

Modern laptops and desktop computers often have network interfaces integrated into their mainboards.

Example: A desktop computer uses its Ethernet NIC to connect to a switch through an Ethernet cable.

3.3 Copper Ethernet Cables

Copper Ethernet cables carry electrical signals between compatible network interfaces. Cat5e and Cat6 twisted-pair cables are common examples. RJ45-style connectors are widely used with these cables.

Example: A Cat5e cable connects a computer's Ethernet port to a switch port.

3.4 Fibre-Optic Cables

Fibre-optic cables carry data using light through optical fibres. They are useful for high-capacity links and longer distances, including links between buildings and network distribution points.

Example: A school uses a fibre-optic link between its main building and a second computer laboratory.

3.5 Router

A router forwards IP packets between different IP networks. It uses routing information to determine where packets should be sent next.

Example: A home router forwards traffic between the home LAN and the ISP network.

3.6 Wireless Access Point

A wireless access point (AP) allows Wi-Fi devices to connect to a network. It bridges wireless devices to the relevant network infrastructure.

Example: Students connect their laptops to the school's Wi-Fi access point.

3.7 Servers

A server is a computer or software system that provides services or resources to clients over a network.

File server
Stores and provides authorised access to shared files.
Mail server
Handles email delivery, sending, or retrieval functions.
Web server
Provides web pages and other resources to web clients.
Database server
Stores, manages, and processes database requests.
Print server
Coordinates access to shared printers and print jobs.
FTP server
Provides file-transfer services using FTP. Traditional FTP is not encrypted.
DNS server
Answers Domain Name System queries, such as requests to resolve domain names.
Backup server
Stores backup copies of important data for recovery.

4. LAN — Local Area Network

A Local Area Network (LAN) connects devices within a relatively limited geographical area, such as a home, classroom, office, school, or computer laboratory.

Ethernet and Wi-Fi are commonly used to connect devices in a LAN. A LAN can provide local communication even when it has no Internet connection.

4.1 How to Construct a LAN

Step 1: Prepare the computers.

Each computer needs a suitable network interface, such as an Ethernet NIC, to connect to a wired LAN.

Step 2: Prepare the Ethernet cables.

Use suitable Ethernet cables with compatible connectors. Cat5e is a common choice for a new basic Ethernet installation.

Step 3: Connect the computers to a switch.

Insert one end of an Ethernet cable into a computer's Ethernet port and the other end into a switch port. Repeat this process for each computer, using a separate switch port and cable.

Step 4: Connect the servers and other devices.

Connect the file server, printer, and other network devices to available switch ports. The devices must also have suitable network configuration and services.

LAN Construction Diagram

PC 1
PC 2
PC 3
↓ Ethernet cables
LAN Switch
↓
File Server
Printer
Mail Server

Each device connects to an appropriate switch port. The diagram is a simplified logical representation of a physical star topology.

Step 5: Configure the network.

Assign suitable IP addresses, subnet masks or prefixes, and other required settings. DHCP can automatically provide network configuration when a DHCP service is available.

Step 6: Test communication.

Check the physical link indicators, confirm the IP configuration, and test communication between devices. A network administrator may use the ping command where ICMP traffic is permitted.

4.2 How Does a Switch Work?

A switch learns source MAC addresses from received Ethernet frames and builds a MAC address table. It uses that table to forward frames towards the appropriate destination port.

Broadcast traffic and frames with unknown destination addresses may be forwarded to multiple ports within the relevant VLAN.

Example: When PC 1 sends a frame to a known destination on PC 2's port, the switch can forward the frame to that port instead of sending it to every port.

4.3 Client-Server and Peer-to-Peer Networks

Client-server network
A client requests a service from a server. For example, a computer requests a document from a file server.
Peer-to-peer network
Devices can share resources directly with one another without relying on a dedicated central server for every sharing task.

5. Connecting Two LANs Using Fibre-Optic Cable

Organisations may operate separate LANs in different buildings or sections of a campus. These LANs can be interconnected using suitable network equipment and communication links.

Two LANs Connected by Fibre

Computers
LAN A
↔
Switch A
⇔
Switch B
↔
Computers
LAN B

The double arrow represents a suitable fibre-optic uplink between compatible network interfaces.

How the connection is made:

  • Connect the devices in LAN A to Switch A.
  • Connect the devices in LAN B to Switch B.
  • Use compatible optical interfaces and transceivers where required.
  • Connect the switches using a suitable fibre-optic cable.
  • Configure the link and test connectivity.

Fibre-optic links can provide high bandwidth, support long distances, and resist electromagnetic interference.

Important distinction: A fibre link between switches can extend the same Layer 2 network when configured appropriately. If the two LANs use different IP subnets, a router or Layer 3 switch is normally required to route traffic between them. Fibre itself does not automatically provide an Internet connection.

6. Connecting a LAN to the Internet

The Internet is a global system of interconnected networks that communicate using the Internet protocol suite. An ISP (Internet Service Provider) provides a service that connects a customer to the provider's network and, typically, to the Internet.

6.1 Basic Internet Connection

LAN to Internet

Computers
→
Switch
→
Router / Gateway
→
ISP
→
Internet

In this arrangement, computers connect to the switch. The switch connects to a router or gateway, which forwards IP packets towards the ISP. The ISP provides connectivity to other networks.

6.2 Internet Connection with a Separate Firewall

Business Network Example

Computers
and Servers
→
Switch
→
Firewall
→
Router
→
ISP
→
Internet

Simplified arrangement. Actual installations may combine firewall, routing, switching, and wireless functions in the same equipment.

Switch
Connects devices within the LAN and forwards Ethernet frames.
Firewall
Applies security rules to network traffic.
Router
Forwards IP packets between networks.
ISP equipment
Provides the required physical or logical connection to the provider's network.
Internet
Enables communication with external networks, servers, and services.

Depending on the service, the connection may use fibre, cable, telephone-line technology, or a mobile network. A home gateway may combine a router, firewall, switch, and Wi-Fi access point.

6.3 DHCP, DNS and NAT

DHCP — Dynamic Host Configuration Protocol
Automatically provides clients with network configuration, such as an IP address and other settings.
DNS — Domain Name System
Resolves domain names into DNS records, often including IP addresses needed to reach a service.
NAT — Network Address Translation
Translates IP addresses and, in common home-router configurations, may also translate transport-layer port numbers. It is often used to allow multiple private IPv4 devices to share a public IPv4 address.

7. Why Is a Firewall Needed?

A firewall is a security system that monitors and controls network traffic according to a set of rules. It helps prevent unauthorised connections and restricts traffic that should not be allowed.

Important functions include:

  • Blocking traffic that violates security rules.
  • Allowing required connections to approved services.
  • Controlling inbound and outbound traffic.
  • Separating networks with different levels of trust.
  • Recording relevant traffic events for monitoring and investigation.
  • Restricting access to selected devices, services, ports, or applications, depending on firewall capabilities.

Example: A school firewall can allow students to access approved educational websites while restricting unwanted incoming connections to internal computers.

Hardware firewall
A physical device or appliance that provides network security functions.
Software firewall
A program running on a computer or server that controls network connections.
Cloud firewall service
A service that applies security controls to supported cloud or network traffic.
Remember: A firewall alone cannot guarantee complete security. Strong authentication, updates, backups, endpoint protection, encryption, and responsible user behaviour are also important.

8. Network Protocols

A network protocol is a set of agreed rules that defines how devices or applications exchange information. Different protocols perform different tasks, and several protocols often work together during a single communication.

Protocol Purpose Example
Ethernet (IEEE 802.3) Wired LAN communication. A computer sends an Ethernet frame through a switch.
Wi-Fi (IEEE 802.11) Wireless local area networking. A laptop connects to a wireless access point.
IP Logical addressing and packet delivery between networks. A packet travels towards a web server.
TCP Reliable, ordered byte-stream communication. Commonly used by HTTP/1.1 and HTTP/2.
UDP Datagram communication without TCP's built-in delivery guarantees. Used by DNS queries and by applications such as QUIC.
HTTP Transfers web resources. A browser requests a web page.
HTTPS HTTP protected using TLS. A browser securely connects to a website.
DNS Queries and resolves domain-name records. Finding address information for a website.
DHCP Automatically provides IP configuration. A laptop receives its network settings.
SMTP Sends and relays email. An email system transfers a message.
IMAP / POP3 Accesses or retrieves email. A user reads email using a mail application.
FTP Transfers files; traditional FTP is unencrypted. A client uploads a file to an FTP server.
SFTP Secure file transfer over SSH. A user transfers files securely.
SSH Secure remote access and command execution. An administrator manages a remote server.
ICMP Network diagnostics and error reporting. Ping uses ICMP Echo messages where permitted.

How Do These Protocols Work Together?

Suppose a student opens an HTTPS website. DNS may help the computer find the server's IP address. IP carries packets between networks. HTTPS protects the web communication using TLS. HTTP defines the web request and response, while the transport mechanism depends on the HTTP version.

HTTP/1.1 and HTTP/2 commonly use TCP. HTTP/3 uses QUIC over UDP. Therefore, not every web connection uses exactly the same transport protocol.

9. How Does the Web Work?

The World Wide Web (WWW) is a system of linked resources accessed over the Internet. Websites are commonly accessed using a web browser.

Web browser
Software used to access and display web resources, such as Chrome, Firefox, or Edge.
Web server
A system that responds to requests for web pages, images, scripts, and other resources.
URL
A Uniform Resource Locator identifies the location of a resource, for example https://example.com/.
Domain name
A human-readable name used to locate Internet services, such as example.com.

Steps Involved in Opening a Website

How a Website Opens

1. Browser
→
2. DNS
→
3. IP Network
↓
4. Web Server
→
5. Response
→
6. Browser Displays Page
  1. The user enters a website address in the browser.
  2. The browser obtains the necessary destination information, often using DNS.
  3. The computer sends packets through the LAN and its gateway.
  4. Routers forward the packets towards the destination service.
  5. The web server processes the request and returns the appropriate response.
  6. The browser receives the resources and displays the web page.

Real communication may involve caching, existing connections, multiple routers, content delivery networks, and other optimisations. The return traffic may follow a different route from the outgoing traffic.

Simple example: When you visit an educational website, your browser sends a request, the website's server responds, and your browser displays the requested content.

10. Internet Services

Internet services are applications and resources available through the Internet. The Internet is the underlying network infrastructure; the Web is one service that operates over it.

World Wide Web
Accessing websites, online articles, educational resources, and web applications.
Email
Sending and receiving electronic messages and attachments.
File transfer and cloud storage
Uploading, storing, sharing, and downloading authorised files.
Instant messaging
Exchanging messages and files in real time or near real time.
Video conferencing
Participating in online classes, meetings, and video calls.
Media streaming
Watching videos and listening to audio over a network.
Online education
Attending classes, accessing notes, and submitting assignments online.
E-commerce
Buying and selling goods or services through online platforms.
Online banking
Accessing banking services through authorised websites or applications.
Online gaming
Playing games with other users or online game servers.
Remote access
Securely accessing a remote computer or network when authorised.
Internet of Things (IoT)
Connecting devices such as sensors, smart appliances, and monitoring equipment.

Security tip: When using online banking or other sensitive services, use trusted applications or websites, check the destination carefully, enable multi-factor authentication where available, and never share passwords or one-time codes.

11. IP Address, MAC Address and Gateway

11.1 IP Address

An IP address is a logical address used to identify a network interface for communication using IP.

Example of a private IPv4 address: 192.168.1.10.

11.2 MAC Address

A MAC address is a link-layer address used for communication on technologies such as Ethernet and Wi-Fi. Ethernet switches commonly use source and destination MAC addresses to forward frames within a Layer 2 network.

Illustrative example: 00:1A:2B:3C:4D:5E.

11.3 Subnet Mask

A subnet mask or IP prefix identifies the network portion of an IPv4 address and helps determine whether a destination belongs to the local subnet.

Example: 192.168.1.10/24 identifies an address using a 24-bit network prefix.

11.4 Default Gateway

A default gateway is the router or Layer 3 interface to which a device sends traffic when the destination is outside the device's directly connected IP network and no more specific route applies.

Example: A computer in a home LAN sends traffic for an external website to its configured router.

Term Main purpose
MAC address Link-layer delivery on a local network link.
IP address Logical addressing for communication across IP networks.
Subnet mask / prefix Identifies the IP network portion of an address.
Default gateway Provides the next hop for traffic requiring an external route.

12. Network Topologies

A network topology describes how network devices are arranged or interconnected. A physical topology describes the physical connections, while a logical topology describes how data flows through the network.

Star topology
Devices connect to a central switch or other central device. This is common in modern wired Ethernet LANs.
Bus topology
Devices share a common communication backbone. Traditional bus networks require suitable termination and are less common in modern LAN installations.
Ring topology
Devices are connected in a ring arrangement. Some technologies use ring structures for communication or resilience.
Mesh topology
Devices or network nodes have multiple interconnections, which can provide alternative paths when a link fails.

13. Difference Between LAN and WAN

A WAN (Wide Area Network) connects networks across large geographical areas. It can connect branch offices, campuses, data centres, and other networks using long-distance links or service-provider infrastructure.

Feature LAN WAN
Full form Local Area Network Wide Area Network
Coverage Relatively limited area Large geographical area
Example School computer laboratory Company offices in different cities
Connectivity Often uses Ethernet and Wi-Fi May use provider networks, leased links, fibre, or VPNs
Management Often managed by one household or organisation May involve several organisations and service providers
Cost Often lower for a small local installation Long-distance connectivity can cost more
Performance Often offers high local speeds and low latency Depends on link technology, distance, capacity, and congestion
Complexity Often simpler to configure and maintain Can require more complex routing and management

Important: Not every LAN is faster than every WAN. Actual speed and latency depend on the technology, distance, equipment, configuration, and network conditions.

The Internet is a global network of interconnected networks. It is commonly described as WAN-scale infrastructure, but the Internet and a private WAN are not exactly the same thing.

14. Advantages and Disadvantages of WAN

Advantages of WAN

  • Connects offices in different cities or countries.
  • Supports communication and collaboration over long distances.
  • Allows authorised users to access shared organisational resources.
  • Supports centralised applications and information systems.
  • Can enable remote working and access to cloud services.
  • Supports off-site backups and disaster recovery when properly designed.

Disadvantages of WAN

  • Installation and ongoing connectivity costs may be high.
  • Configuration and maintenance can be complex.
  • Long-distance communication may have higher latency.
  • Congestion or provider problems may reduce performance.
  • A failed link may interrupt remote access unless redundancy is provided.
  • Connecting more sites can increase security and troubleshooting requirements.

Example: A company with offices in Colombo, Kandy, and Jaffna can use a WAN to connect its branch networks and provide authorised staff with access to shared applications.

15. Basic Network Security

Network security involves protecting network devices, data, services, and users from unauthorised access, misuse, and disruption.

  • Strong passwords: Use unique, hard-to-guess passwords.
  • Multi-factor authentication: Add another verification factor where supported.
  • Software updates: Install security updates for operating systems, applications, and network equipment.
  • Firewalls: Apply suitable rules to control traffic.
  • Encryption: Protect sensitive communications using appropriate secure protocols.
  • Access permissions: Give users only the access they need.
  • Backups: Keep regular backups and test recovery procedures.
  • Endpoint protection: Use suitable security controls on computers and servers.
  • Safe browsing: Avoid suspicious links, unexpected attachments, and untrusted downloads.
  • Monitoring: Review relevant logs and investigate unusual network activity.
Security reminder: Never assume that a network is completely safe just because it has a firewall. Security requires multiple layers of protection and regular maintenance.

16. Network Performance: Bandwidth, Throughput and Latency

Bandwidth
The capacity of a communication link, commonly measured in bits per second (bps).
Throughput
The actual rate at which data is successfully transferred.
Latency
The time taken for data to travel between endpoints or for a response to return, depending on the measurement.
Packet loss
The failure of some transmitted packets to reach their destination.

For example, a link may have a high advertised bandwidth but deliver lower actual throughput because of congestion, interference, protocol overhead, or equipment limitations. High latency can make interactive applications feel slow even when the link has sufficient bandwidth.

Wired and Wireless Networks

  • Wired Ethernet: Often offers predictable performance and a stable connection.
  • Wi-Fi: Provides mobility and convenient access, but its performance can be affected by distance, obstacles, interference, and congestion.

17. Final Summary

Let us review the key concepts covered in this tutorial.

  • A computer network connects devices to exchange data and share resources.
  • A LAN connects devices within a relatively limited area.
  • A NIC provides a device's network interface.
  • A switch connects devices within a LAN and forwards Ethernet frames.
  • Copper Ethernet cables and fibre-optic links provide wired communication.
  • A router forwards IP packets between networks.
  • An ISP provides connectivity to external networks and the Internet.
  • A firewall controls network traffic according to security rules.
  • Network protocols define how devices and applications communicate.
  • The Web is an Internet service accessed through web browsers and servers.
  • IP addresses and MAC addresses serve different purposes.
  • A WAN connects networks across large geographical areas.
  • Network security, backups, and maintenance are essential.

18. Revision Questions

Test your understanding with these questions.

  1. What is a computer network?
  2. State four advantages of computer networking.
  3. What is the purpose of a Network Interface Card?
  4. How are several computers connected in a typical wired LAN?
  5. Explain the difference between a switch and a router.
  6. What is the purpose of a fibre-optic link between two LANs?
  7. Why is a firewall used in a computer network?
  8. What is the difference between an IP address and a MAC address?
  9. State the functions of DNS and DHCP.
  10. What is the difference between HTTP and HTTPS?
  11. Explain how a browser obtains and displays a web page.
  12. Name five Internet services.
  13. State three differences between LAN and WAN.
  14. Give three advantages and three disadvantages of WAN.
  15. Explain bandwidth, throughput, and latency.
  16. State four methods of improving network security.

Keep Learning!

Computer networking is the foundation of modern digital communication. Once you understand LANs, network devices, IP addressing, protocols, and Internet connectivity, you can move on to more advanced topics such as subnetting, routing, switching, wireless configuration, network troubleshooting, and cybersecurity.

Learn step by step. Practise regularly. Build your networking knowledge!