Social engineering attacks manipulate people rather than technology. Intimidation (threatening or pressuring victims) and Impersonation (pretending to be someone else) are classic social engineering techniques. Option A is correct. Options B (SQL Injection), C (Man in the middle), D (Cookie poisoning) are technical attacks, not social engineering.