Drag

The tester has no prior knowledge of the target system.

Drop

Known test

The tester has detailed information about the target system prior to starting the test.

The tester has the same amount of information that would be available to a typical insider in the organization.

The tester does not have prior information about the system, and the administrator has no knowledge that the test is being performed.

Either the attacker has prior knowledge about the target system or the administrator knows that the test is being performed.