When may indicators of a terrorist attack occur?

• A. Immediately before
• B. Months or years apart
• C. During the attack
• D. After the event

Answer: (B)

Indicators of a terrorist attack can surface well before the event, sometimes months or even years apart. This reflects how plots are often developed in stages: reconnaissance, planning, funding, procurement, and training may unfold over long periods with gaps between steps. Security teams should monitor for patterns of suspicious behavior over time rather than expecting a single, obvious sign right before an incident. While some indicators may appear near or during an attack, the most accurate understanding is that indicators may occur months or years apart, highlighting the staged nature of many plots.