Susan has attached to her company's network. She has managed to synchronize her boss's sessions with that of the file server. She then intercepted his traffic destined for the server, changed it the w

A sniffing attack is purely passive - the attacker only captures and reads traffic without modifying or relaying it between parties.

A spoofing attack involves impersonating an identity such as an IP or MAC address, but does not require intercepting and modifying live traffic in transit between two parties.

In a man-in-the-middle attack, the attacker positions herself between two communicating parties - here Susan synchronized sessions between the boss and the file server. She intercepted the boss's traffic, altered its contents, and forwarded the modified data to the server, with neither endpoint aware of her presence or interference.

A denial of service attack aims to make a resource unavailable to legitimate users, not to intercept and alter communications.