Which two are social-engineering attacks?

Phishing and pharming are both social engineering attacks. Phishing involves an attacker attempting to trick a user into revealing sensitive information (like usernames, passwords, or credit card details) by impersonating a trustworthy entity, often through email or instant messages. Pharming is a more advanced attack where an attacker redirects a user's legitimate website traffic to a fake website without their knowledge, often by manipulating DNS entries or host files, to steal information. Malvertising is the use of legitimate online advertising to spread malware, which is a technical attack, not primarily social engineering. Probing refers to reconnaissance or scanning activities, and phoning is a general communication method, not an attack type itself.