testers have no knowledge of environment, just like an attacker
no knowledge of the system, tester is operating as if they were an outside attacker
attacker has no knowledge of the network environment (external attack)