SOA-C02 Monitoring, Logging, and Remediation Practice Question
A company has a CloudWatch alarm that monitors the CPU utilization of an EC2 instance. The alarm is set to trigger when CPU utilization exceeds 80% for 5 consecutive minutes. The alarm state is 'INSUFFICIENT_DATA'. What does this mean?
⚠ Common exam trap
Many exam-takers confuse INSUFFICIENT_DATA with missing data points for the exact evaluation period, but the state actually means the alarm cannot determine whether the threshold is breached due to a lack of sufficient data across the configured evaluation periods, not just the last 5 minutes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The alarm does not have enough data to determine the state.
The INSUFFICIENT_DATA state in CloudWatch indicates that the alarm has not received enough metric data points to evaluate whether the threshold (CPU utilization > 80% for 5 consecutive minutes) has been breached. This typically occurs when the EC2 instance is newly launched, the CloudWatch agent is not reporting, or there are gaps in metric collection due to network issues or instance stops. It does not imply any conclusion about the CPU utilization level itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The CPU utilization is below 80% for 5 minutes.
Why it's wrong here
If CPU utilization has been below 80% for the past five minutes and the alarm has received those data points, the alarm enters the OK state because the metric is not breaching the configured threshold. That is a fully determined, valid state—the opposite of INSUFFICIENT_DATA, which means there is no basis to decide whether the alarm should be OK or ALARM.
- ✗
The CPU utilization has exceeded 80% for 5 minutes.
Why it's wrong here
If CPU utilization has been continuously above the 80% threshold for five minutes and those data points exist in CloudWatch, the alarm would enter the ALARM state, not INSUFFICIENT_DATA. This condition represents a confirmed breach of the threshold, whereas INSUFFICIENT_DATA indicates that CloudWatch lacks enough observations to compute the comparison at all.
- ✓
The alarm does not have enough data to determine the state.
Why this is correct
The INSUFFICIENT_DATA state is specifically defined as the alarm being unable to evaluate the metric against the threshold because the number of data points received during the alarm's evaluation period is below the required minimum number. This occurs, for example, when no metrics are published, when a client app stops emitting metric values, or when a math expression returns no results. It is a distinct alarm state independent of OK and ALARM.
- ✗
The alarm is missing data points for the past 5 minutes.
Why it's wrong here
Missing data points can cause the INSUFFICIENT_DATA state, but the state itself is not defined as 'the alarm is missing data points.' The alarm may still have some data points within the evaluation period—just not enough to satisfy the 'evaluation periods' and 'datapoints to alarm' configuration. Additionally, CloudWatch lets you choose how to treat missing data (as breaching, not breaching, or maintain last state), so missing points do not automatically produce INSUFFICIENT_DATA; rather, INSUFFICIENT_DATA is what occurs when the alarm explicitly lacks sufficient data to perform the evaluation.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SOA-C02 question from scratch — 1,169 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SOA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SOA-C02 exam.