The correct answer is 'Obtaining a signed authorization form from the system's owner.' This is correct because written permission, in the form of a signed form, is a direct and clear means of acquiring the consent required to legally conduct a penetration test on the system in question. Other options, such as verbal consent or the absence of a formal agreement, do not provide the necessary legal protection and documented proof of authorization that is often required before initiating an attack.