no prior knowledge of the system or network to be assessed
the pen tester has absolutely no knowledge of the system and its functioning in the same manner as an outside attacker
no knowledge of the system, tester is operating as if they were an outside attacker