Which term describes an unusual incident affecting PL 1, 2 or 3 resources that is probably hostile?

• A. Blue expedition
• B. Red alert
• C. Covered wagon
• D. Drizzle plan

Answer: (C)

When an unusual incident affects high-priority (PL 1–3) resources and there’s a strong likelihood it’s hostile, there’s a specific code word used to signal rapid, coordinated action. Covered wagon is the term that communicates that exact scenario—an uncommon event impacting mission-critical assets with probable hostile intent. Using this code allows responders to immediately mobilize security measures, alert leadership, restrict access, and escalate the incident across the chain of command without delay. The other terms don’t fit this precise situation: Blue expedition isn’t the designation for a hostile incident affecting critical resources; Red alert signals a general heightened state of readiness, not necessarily tied to the specific impact on PL resources; Drizzle plan is unrelated to incident response scenarios.