Network devices are the physical pieces of hardware that connect computers, printers, and servers so they can share information. Understanding how each device works — and what problem it solves — is essential for passing the 220-1201 exam because you will be asked to compare routers, switches, hubs, modems, firewalls, and access points, and to recognise which one belongs in which scenario.
Jump to a section
A simple way to picture Network Devices and Topologies
When a package arrives for you at your office, the mailroom first checks the recipient name, then routes it to the correct floor. That sequence causes the package to reach your desk efficiently, even if you work in a different building across town. This is exactly how network devices handle data traffic.
Imagine you work in a large corporate headquarters with multiple buildings. Each building has its own mailroom clerk. When a letter arrives for someone in Building B, the clerk in Building A doesn't open it or read its contents — they just look at the department name and pass it to Building B's clerk. The Building B clerk then looks at the person's name and hands it to the right office. Here, the clerks are switches (they direct traffic within a building) and routers (they pass traffic between buildings). A firewall is like a security guard at the entrance who checks that no dangerous packages enter. A modem is like the post office's central sorting facility that translates between different postal systems (like analogue to digital). A wireless access point is like a mailroom extension that delivers to people working from their cars in the parking lot. The topology — bus, star, ring, mesh — is the layout of the hallways and conveyor belts that connect all these mailrooms together. Every device has a specific job, and if one goes down, the mailroom either reroutes or the package gets stuck. This analogy precisely maps to network devices because each device has a unique role in moving data from one point to another without reading the data itself, and the topology determines how resilient or efficient that movement is.
Network devices are the building blocks that allow data to travel from one computer to another. Think of them as the plumbing pipes, valves, and meters of a digital house. Each device has a specific job.
Let us start with the hub. A hub is the simplest device. It connects multiple computers in a local area network (LAN), which is a network inside a single building or office. When a hub receives data from one computer, it copies that data and sends it out to every single port (connection point) except the one it came from. This is inefficient because every computer sees all the traffic, even traffic not meant for it. Hubs are mostly obsolete now because they create a lot of noise and collisions — when two computers send data at the same time, the hub cannot sort it out.
A switch is a smarter version of a hub. A switch also connects devices in a LAN, but instead of broadcasting to everyone, it learns which device is on which port by looking at the Media Access Control (MAC) address — a unique hardware identifier burned into every network adapter. When a switch receives data, it checks the destination MAC address and sends it only to the correct port. This is much faster and more secure because other computers never see the data. Switches are the standard in modern offices.
A router is a different kind of device. While switches connect devices inside one network, routers connect different networks together — for example, your home network to the Internet. Routers use Internet Protocol (IP) addresses, which are logical addresses like 192.168.1.1, to decide the best path for data to travel. They keep a table called a routing table that lists which network can be reached through which interface. When you type a website address, your router looks at the destination IP, checks its table, and forwards the data to the next router closer to that website. Routers also perform Network Address Translation (NAT), which lets multiple devices in your home share one public IP address.
A modem (modulator-demodulator) converts digital signals from your computer into analogue signals that can travel over telephone lines, cable TV lines, or fibre optic cables, and then back again. Without a modem, you cannot connect to your Internet service provider (ISP). There are cable modems (using coaxial cable), DSL modems (using phone lines), and fibre modems (using light pulses through glass strands).
A firewall is a security device that monitors incoming and outgoing traffic and decides whether to allow or block it based on a set of rules. Firewalls can be hardware appliances sitting between your router and your internal network, or software running on a computer. They protect against unauthorised access and malicious traffic. For example, a firewall might block all incoming connections from outside your office except for email traffic.
A wireless access point (WAP or AP) allows wireless devices like laptops and phones to connect to a wired network. In a home, the router often combines a switch, wireless access point, and sometimes a modem into one box. In a business, WAPs are separate devices mounted on ceilings to provide Wi-Fi coverage across a large area. They connect back to a switch via an Ethernet cable.
Now let us talk about topology — the physical or logical layout of a network. Common topologies include:
Bus topology: all devices are connected to a single cable (the backbone). If the cable breaks, the entire network goes down. It is cheap but unreliable.
Star topology: all devices connect to a central switch or hub. If one device fails, only that device is affected. If the central switch fails, everything goes down. This is the most common topology today.
Ring topology: each device is connected to two neighbours, forming a ring. Data travels in one direction. A single break can take down the whole ring unless it is a dual-ring topology.
Mesh topology: every device is connected to every other device. This is very resilient but uses a lot of cable and is expensive. It is used in critical networks like military or data centres.
Hybrid topology: a combination of two or more topologies, e.g., a star-bus hybrid where multiple star networks are connected by a bus backbone.
Understanding these devices and topologies helps you design a network that is fast, secure, and resilient. For the 220-1201 exam, you must know the difference between a hub and a switch, when to use a router vs a switch, what a modem does, how a firewall filters traffic, and which topology matches a given scenario.
1. Identify the network need
Determine how many devices need to connect, whether they need wired or wireless access, and whether they need to reach the internet. For example, an office with 50 desktops and 30 laptops needs a switch for wired devices and a wireless access point for laptops.
2. Choose a physical topology
Select a topology (star, bus, ring, mesh) based on cost, reliability, and scalability. Most modern networks use a star topology because it is easy to troubleshoot: you can unplug one faulty cable without disrupting the rest.
3. Install the central switch
Place a switch at the centre of the star topology. Connect each device to the switch using Ethernet cables. The switch learns the MAC addresses of all connected devices and forwards traffic only where it is needed, reducing congestion.
4. Connect to a router for internet access
Connect the switch to a router via an Ethernet cable. The router receives data from the switch and forwards it to the modem or directly to the internet. The router also performs Network Address Translation (NAT) so all devices can share a single public IP address.
5. Install a modem for ISP connectivity
Connect the modem to the router's WAN port. The modem converts the digital signals from the router into analogue signals suitable for the ISP's medium (coax, DSL, fibre). Without the modem, the router cannot communicate with the internet.
6. Add a firewall for security
Place a hardware firewall between the modem and the router, or enable the firewall feature on the router. Configure rules to block unauthorised inbound traffic, such as all ports except 80 (web) and 443 (secure web). This protects internal devices from external threats.
7. Deploy wireless access points
If wireless connectivity is needed, install wireless access points (WAPs) in strategic locations (e.g., ceilings in open areas). Connect each WAP to the switch via Ethernet. Configure the SSID and security (WPA3) so users can connect securely.
Imagine you are the IT support technician for a small accounting firm with 30 employees. The office has a main server room and three departments: Payroll, Auditing, and Administration. The company just moved to a new building and you need to set up the network from scratch.
First, you need to decide on the physical topology. You choose a star topology because it is reliable and easy to troubleshoot. You run Category 6 (Cat6) Ethernet cables from each desk to a central patch panel in the server room. From the patch panel, you connect each cable to a port on a managed switch. The switch is the centre of your star — each computer now has a direct, dedicated connection. You configure the switch to separate traffic between departments by creating VLANs (Virtual Local Area Networks). This means a computer in Payroll cannot accidentally access files on an Auditing computer unless you specifically allow it.
Next, you install a router to connect your internal network to the Internet. Your Internet service provider installed a fibre optic cable that terminates at a fibre modem on the wall. You connect the modem to the router's WAN (Wide Area Network) port using an Ethernet cable. The router has a built-in firewall that you configure to block all incoming traffic except for a secure VPN connection that remote auditors use. You also set up Network Address Translation so all 30 computers can share the single public IP address your ISP gave you.
For wireless access, the office has a large open-plan area where auditors bring their laptops. You install three wireless access points on the ceiling, each connected to the switch via Ethernet. You configure them with the same SSID (network name) and a strong password, using WPA3 (Wi-Fi Protected Access 3) encryption. Because the access points are connected to the same switch, employees can walk from one end of the office to the other and stay connected as their device automatically switches to the nearest access point — this is called roaming.
Finally, you add a hardware firewall appliance between the modem and the router as an extra security layer. You set rules that block all traffic from countries where your company does not do business. You also enable logging so you can see if anyone tries to probe your network.
One day, the Payroll department complains that the network is slow. You check the switch's management console and see that one port is flooding the network with errors because its cable is damaged. You identify the cable by its port number, replace it, and the network speeds return to normal. Because you used a managed switch (one you can configure and monitor), you solved the problem in minutes. If you had used an unmanaged switch, you would have had to manually check every cable.
This scenario shows how an IT professional uses network devices in practice: choosing the right device for each job, configuring security, troubleshooting connectivity, and ensuring that the topology supports the needs of the business.
The 220-1201 exam tests your ability to compare and contrast network devices. You will not be asked to configure them, but you must know what each device does and when to use it. Expect multiple-choice questions where you are given a scenario — for example, "A company needs to connect two separate buildings with a secure, dedicated link. Which device should they use?" The answer is a router with a firewall (or a VPN concentrator, but that is not on the list).
Key device functions you must memorise:
Hub: repeats data to all ports. Layer 1 device (Physical layer of the OSI model). Obsolete.
Switch: forwards data based on MAC addresses. Layer 2 device. Creates collision domains per port.
Router: forwards data based on IP addresses. Layer 3 device. Connects different networks.
Modem: converts digital to analogue and vice versa. Connects to ISP.
Firewall: filters traffic based on rules. Can be hardware or software.
Wireless access point: bridges wireless and wired networks.
Patch panel: a passive device used to organise cables — it does not amplify or direct traffic.
Exam traps to watch out for:
They love to ask about the difference between a hub and a switch. The trap is that both connect devices in a LAN, but the hub broadcasts to all ports (half-duplex, no collision avoidance), while the switch sends only to the correct port (full-duplex, microsegmentation).
They will give you a scenario with a wireless network not working and ask which device you need. Do not pick "modem" — pick "wireless access point" if the wired network already works.
They test topologies by asking which one is most fault-tolerant. The answer is mesh. Which one is cheapest? Bus. Which one is most common today? Star.
They sometimes ask about a device you might not have heard of, like a bridge (connects two LAN segments) or a repeater (amplifies a signal over long distances). Learn them briefly.
They will test whether you know that a switch can create VLANs to segment traffic logically, but that does not make it a router — it is still Layer 2 unless it is a Layer 3 switch, which can also route.
Understand the OSI model layers roughly: Hub = Layer 1, Switch = Layer 2, Router = Layer 3. This is a quick differentiator.
Finally, know the difference between physical topology (layout of cables) and logical topology (how data flows). For example, a network might physically be a star but logically act like a ring (e.g., Token Ring — no longer used but still tested historically).
Practise with sample questions: "Which network device can interpret IP addresses to make forwarding decisions?" Answer: Router. "Which device creates separate collision domains for each connected device?" Answer: Switch. "Which topology requires the most cabling?" Answer: Mesh.
A hub broadcasts all data to every port, while a switch intelligently forwards data only to the destination device using MAC addresses.
A router connects different networks (like your home network and the internet) by using IP addresses and maintaining a routing table.
A modem converts digital signals from your computer into analogue signals for transmission over telephone or cable lines, and back again.
A firewall examines incoming and outgoing traffic based on a set of security rules and blocks or allows data accordingly.
A wireless access point allows Wi-Fi devices to connect to a wired local area network, but does not perform routing or modem functions.
In a star topology, all devices connect to a central switch; a single device failure does not affect others, but the switch is a single point of failure.
A mesh topology provides the highest redundancy because every device is connected to every other device.
The 220-1201 exam expects you to know that a switch operates at Layer 2 and a router operates at Layer 3 of the OSI model.
These come up on the exam all the time. Here's how to tell them apart.
Hub
Broadcasts data to all ports except the sender
Operates at Layer 1 (Physical layer) of the OSI model
Creates a single collision domain for all devices
Switch
Forwards data only to the destination port using MAC addresses
Operates at Layer 2 (Data Link layer) of the OSI model
Creates a separate collision domain for each port
Router
Connects different networks (e.g., LAN to internet)
Uses IP addresses to make forwarding decisions
Operates at Layer 3 (Network layer) of the OSI model
Switch
Connects devices within the same network (LAN)
Uses MAC addresses to make forwarding decisions
Operates at Layer 2 (Data Link layer) of the OSI model
Wireless Access Point
Provides wireless connectivity to a wired network
Does not perform Network Address Translation (NAT)
Does not assign IP addresses (relies on a DHCP server on the router)
Router
Connects multiple networks and routes traffic between them
Performs Network Address Translation (NAT) to share a public IP
Often includes a DHCP server to assign IP addresses to devices
Star Topology
All devices connect to a central switch or hub
Single point of failure (the central switch) can disable the whole network
Uses less cabling than mesh, making it cheaper to install
Mesh Topology
Every device connects to every other device directly
No single point of failure; highly fault-tolerant
Requires the most cabling, making it expensive and complex to maintain
Modem
Converts digital signal to analogue (modulation) and back (demodulation)
Connects directly to the ISP's infrastructure (cable, DSL, fibre)
Does not assign IP addresses or route traffic between networks
Router
Routes data between your local network and the internet using IP addresses
Performs Network Address Translation (NAT) and usually includes a DHCP server
Does not change the signal type (uses Ethernet cables for input/output)
Mistake
A router and a modem are the same device — one box does both jobs always.
Correct
A router connects networks using IP addresses; a modem converts signal types (analogue to digital). They are separate functions. A combined unit is a gateway, but not all routers are modems.
Home internet providers often give out a single box that contains both a modem and a router, so beginners assume they are the same thing.
Mistake
A switch gives you internet access — if I plug a switch into a cable, I get Wi-Fi.
Correct
A switch only connects devices within a local network. To get internet, you need a router connected to a modem. The switch extends the local network, but without a router, there is no internet.
Beginner home users often buy a 'network switch' thinking it will give them Wi-Fi, because they see 'router' and 'switch' confused in product marketing.
Mistake
A firewall is only needed for large corporations; home networks do not need one.
Correct
Every network connected to the internet should have a firewall. Even a home router has a basic firewall built in, and disabling it leaves all devices exposed.
Beginners think they are not a target because they have nothing valuable, but firewalls also block automated scans and malware that target any IP address.
Mistake
Adding a hub to a network makes it faster because it distributes traffic.
Correct
A hub actually makes the network slower because it broadcasts all traffic to all ports, causing collisions and forcing devices to retransmit. A switch is faster because it sends data only where it needs to go.
The word 'hub' sounds central and efficient, like a transportation hub. The technical reality is the opposite.
Mistake
Wireless access points and routers are interchangeable terms — they do the same thing.
Correct
A wireless access point (WAP) only provides wireless connectivity to a wired network. A router connects different networks and often has a built-in wireless access point, but a standalone WAP does not route traffic.
Consumer devices combine functions, so beginners assume every box that produces Wi-Fi is a router.
Mistake
The physical topology of a network determines the speed of the network.
Correct
Physical topology affects reliability and cost, but speed is determined by the network standard (e.g., Gigabit Ethernet vs Fast Ethernet), cable quality, and device capabilities, not by whether it is a star or bus layout.
Beginners associate 'layout' with 'efficiency' because of analogies like 'traffic patterns affect speed', but in networking, the medium and hardware are the speed limit.
Reveal each answer, then mark whether you got it right. Score 60%+ to unlock the next chapter.
Yes, you still need a router (or a device with routing capability) because the modem alone cannot assign an IP address or manage traffic. Most ISPs provide a combined modem/router.
No. A switch can only connect devices within a local network. To reach the internet, you need a router that can connect your local network to your ISP's network and perform Network Address Translation.
An unmanaged switch simply forwards traffic with no configuration options. A managed switch allows you to configure VLANs, monitor traffic, set port security, and troubleshoot issues. Managed switches are used in business networks; unmanaged switches are for home or simple setups.
You would choose a mesh topology when redundancy and fault tolerance are critical — for example, in a hospital or military network. Mesh topology has multiple paths between devices, so even if several links fail, data can still reach its destination. However, it is expensive and uses a lot of cabling.
A firewall can block traffic based on IP addresses, port numbers, protocols, or application signatures. Yes, you can configure it to block specific websites by domain name (URL filtering) or by blocking the IP addresses of those sites, though this is more commonly done by a proxy server or content filter.
Not necessarily for a small home. But in a large office with thick walls or multiple floors, a separate WAP can extend coverage. Your router's built-in Wi-Fi might not reach all areas, so adding a WAP connected by Ethernet to the switch improves signal strength.
A patch panel is a passive panel with ports that organises Ethernet cables from wall jacks in a server room. It does not manage traffic; it just provides a neat termination point. You do not need one for a simple home network, but for a business with many cables, it makes troubleshooting much easier.
You've just covered Network Devices and Topologies — now see how well it sticks with free 220-1201 practice questions. Full explanations included, no account needed.
Done with this chapter?