The focus of an external penetration test is to identify services exposed on the Internet. Document the exposure or, as we like to call it, "map the attack surface" and analyze what attacks are applicable and most likely to hit your environment and how they can cause harm to your company. Along with recommendations on how to prevent, remediate or reduce the risk of this happening.