no knowledge of the system, tester is operating as if they were an outside attacker
testers have no knowledge of environment, just like an attacker
no prior knowledge of the system or network to be assessed