An external scan is performed from outside the organization's network perimeter. It simulates an external attacker's perspective and reveals vulnerabilities that could be exploited from the internet. It is the best choice for discovering weaknesses from an attacker's viewpoint outside the network, as opposed to internal scans which are performed from within the network to identify threats that could be exploited from inside.