Which two actions can be considered social engineering attacks?

Two common actions that qualify as social engineering attacks are phishing emails and pretexting. In phishing, attackers impersonate trusted entities to trick victims into revealing sensitive data or clicking malicious links. Pretexting involves creating a fabricated scenario—like posing as IT support or a bank representative—to extract confidential information. Both rely on psychological manipulation rather than technical hacking, exploiting trust, urgency, or fear to gain unauthorized access or control over systems and data.