When the person or team testing the system has no knowledge of any…

The idea

This statement describes a penetration test launched from an outsider position. The tester has no knowledge of any credentials for the target system, so the test begins at the outer boundary with no legitimate access. The aim is to simulate an external attack: an attacker trying to get in from outside. The tester must attempt to gain entry without valid logins, for example by probing exposed services, trying default or guessed passwords or exploiting a weakness in a public-facing system. Because there is no starting access, this tests perimeter defences such as firewalls, authentication and exposed services. Recognise the key signals: no knowledge of any credentials, attack simulated from outside, external attack. Contrast this with an insider test where the tester already knows the system and may hold basic credentials.

What earns the marks

• Identifies that the tester has no knowledge of any credentials for the target system.
• States that the attack is simulated from outside the system.
• Links the scenario to the term external attack.
• Recognises that the tester must attempt to gain access without valid logins.
• Distinguishes this external test from an insider test where credentials may be held.

Common mistakes and how to put them right

• Confusing this with an insider attack.

  Put it right: The tester here has no credentials, so the simulation is from outside.

• Assuming the tester is given a login to start.

  Put it right: No credentials are known, so access must be gained from outside.

• Treating it as an unauthorised real intrusion.

  Put it right: It is an authorised test simulating an external attack.

Exam tips

• Look for the phrase no knowledge of any credentials before choosing an option.
• Reject options describing a tester who already holds access, as those describe an insider test.
• Match the scenario to the term external attack to confirm the choice.