A security manager is training their team to identify when a server has experienced a SYN-flood attack. What might indicate to the team members that their organization is at risk?
1) A large number of ICMP packets are delivered to the organization's servers.
2) The server has stopped responding after receiving an unusually high number of incoming SYN packets.
3) An oversized ICMP packet is sent to the network server.
4) The port numbers in the data packets are incorrect.