Which of the following is the process of comparing cryptographic hash functions of system executables and configuration files?

Reconnaissance is the information-gathering phase of an attack where an adversary collects data about a target, not a process that involves hash comparison.

File integrity auditing - also called file integrity monitoring (FIM) - computes cryptographic hash values (such as SHA-256) for executables and configuration files at a known-good state and then periodically recomputes those hashes to detect any deviation. A changed hash value definitively indicates that a file has been modified, deleted, or replaced, revealing tampering or malware activity.

Shoulder surfing is a physical social engineering technique in which an attacker visually observes someone entering credentials or sensitive data.

Spoofing involves forging an identity - such as an IP address, MAC address, or email sender - to impersonate a trusted entity, and is unrelated to file hash comparison.