test without knowledge of system internals.
the pen tester has absolutely no knowledge of the system and its functioning in the same manner as an outside attacker
outsider attack, attacker has no knowledge of the network environment