A system administrator is tasked with granting a user named 'johndoe' the ability to run a backup script located at /usr/local/bin/backup.sh without entering a password. To achieve this securely while employing syntax validation, which of the following configurations should the administrator add to the sudoers file using an appropriate command?
johndoe ALL=(ALL): NOPASSWD /usr/local/bin/backup.sh
johndoe ALL=(ALL) NOPASSWD: /usr/local/bin/backup.sh
johndoe /usr/local/bin/backup.sh
johndoe ALL=(ALL) ALL
ALL johndoe=(ALL) NOPASSWD: /usr/local/bin/backup.sh
johndoe ALL=(ALL) /usr/local/bin/backup.sh