Answer :
I think it would be 2) Penetration testing for a company to check for vulnerability in their network security. Cause grey hat hacking is illegal and the third one the company isn’t in a bug bounty program. Hope this helps.