attacker has no knowledge of the network environment (external attack)
no knowledge of the system, tester is operating as if they were an outside attacker
the pen tester has absolutely no knowledge of the system and its functioning in the same manner as an outside attacker