testers have no knowledge of environment, just like an attacker
the pen tester has absolutely no knowledge of the system and its functioning in the same manner as an outside attacker
attacker has no knowledge of the network environment (external attack)