Which of the following describes an instance of legal hacking?(2 points)

Responses

Looking for security risks on a product that is excluded from a bug bounty program.
Looking for security risks on a product that is excluded from a bug bounty program.

Security hacking is never legal.
Security hacking is never legal.

Penetration testing for a company.
Penetration testing for a company.

Grey hat hacking

Looking for security risks on a product that is excluded from a bug bounty program is an instance of legal hacking. Penetration testing for a company can also be considered legal hacking as it is done with the permission and authorization of the company to assess their security measures.