Packet sniffers enable an attacker to capture and inspect traffic traversing a network is the correct statement.

Packet sniffers operate by passively copying frames or packets that pass through a network interface and then decoding protocol headers and payloads for inspection. This allows an attacker or analyst to observe unencrypted credentials, session tokens, and other sensitive information without altering the traffic, which is why Packet sniffers enable an attacker to capture and inspect traffic traversing a network accurately describes their primary function.

Sending overlapping IP fragments to a host is an example of a malformed packet attack is incorrect. That option describes an active malformed fragmentation attack that targets reassembly logic and can crash or confuse hosts, and it is not the same as passive packet capture.

Packet sniffers can inject forged packets into sessions to manipulate communications is incorrect. Sniffers are primarily passive tools that capture traffic, and injecting forged packets is an active capability that requires packet crafting or transmission tools and appropriate network access. Some toolkits can both capture and send packets, but injection is not a defining property of sniffing.

Session hijacking tools are used to assume control of an existing network connection is incorrect. That option describes session hijacking which is an active attack that may use information gathered by sniffers but it is a distinct technique from passive packet capture.

Full AWS Practitioner Certification Question