A SysOps administrator manages an Auto Scaling group behind an Application Load Balancer. Traffic is spiky, and brief one-minute CPU spikes frequently trigger the scale-out alarm, causing the group to add instances that are terminated moments later. The administrator wants scaling to occur only when high CPU is sustained, while still reacting reasonably quickly. Which change to the CloudWatch alarm best achieves this?