A ping fails but the destination application works. Which conclusion is best?

1. ICMP may be filtered while application traffic is permitted
2. The destination has no usable IP address
3. The application traffic cannot actually be working
4. DNS must be disabled on every router