Run the script again with valid authentication values is the required fix because the automation failure is caused by execution context, syntax, or resource state around REST API. On Cisco Nexus switches, automation is not a single feature; EEM policies, CLI actions, Guest Shell Linux commands, REST payloads, and scheduled jobs are evaluated by different subsystems. A script can fail even while the switch itself has connectivity or the command works interactively. The selected answer supplies the missing requirement, such as the correct event/action, DNS or resource setting, API URI, payload format, feature enablement, or reboot needed for a Guest Shell change to take effect. The other choices address adjacent features but do not satisfy the failing subsystem. After applying the fix, the engineer should verify the policy registration, job result, API response code, or Guest Shell runtime state and confirm that the intended command is no longer blocked or silently ignored.

The correct action is Configure nonredundant mode with PSU1 and 3 on A and PSU2 and 4 on B. Cisco UCS troubleshooting depends on the relationship between policy, inventory discovery, firmware state, and server identity. The question involves UCS, so the selected option fixes the UCS component or policy that directly controls the failure. In UCS Manager, service profiles, vNIC/vHBA templates, boot policies, firmware packages, server pools, adapters, fabric interconnects, and I/O modules are applied through a managed model; a server can fail even when basic IP reachability exists if the relevant policy is incomplete or the hardware inventory has not been acknowledged correctly. The distractors typically change an unrelated object, force a disruptive recovery without fixing the policy, or apply to a different UCS mode. Cisco guidance is to verify faults, FSM stage, inventory status, association status, and the specific boot or connectivity policy before taking action. After the remediation, validate that the fault clears, the FSM completes, and the server or fabric component returns to the expected operable state.

Cisco troubleshooting logic supports the drag-and-drop mapping shown in the answer key as the required fix. In this question the symptoms point to DRAG, DROP, Drag, and the defect is best handled by correcting the exact control-plane or consistency condition. Nexus platforms can show interfaces or peers as configured while still refusing to forward traffic if a vPC Type-1 parameter, VLAN allowance, MTU, HSRP version, EVPN route, or routing attribute is wrong. Cisco methodology is to avoid broad resets unless the state machine is stuck; instead, correct the mismatched parameter and verify that the resulting operational state becomes stable. The other choices do not remove the root cause, or they modify a setting that is not used by the failing protocol exchange. After the change, the engineer should review the peer status, route or MAC table, and counters for drops or inconsistency messages. That sequence proves that the network fabric is fixed, not merely restarted.

The selected action, Delete rule 3 and create new rule 3 to allow the permit command, is the proper operational fix. The scenario points to LACP, RBAC, Cisco Nexus, Nexus 9000, Cisco Nexus 9000, which means the issue is controlled by management policy, role mapping, service state, certificate handling, or firmware lifecycle rather than normal packet forwarding. Cisco documentation separates these domains: a device may ping another device, but UCS Central registration, LDAP/RADIUS authorization, APIC security-domain access, SNMP access, or browser trust still fails if the required management attribute is wrong. The selected answer aligns the configuration with the management workflow. The other answers either address unrelated connectivity or provide a workaround that does not satisfy the platform requirement. Verification should be explicit: authenticate as the affected user, confirm the returned role or domain, check fault status, and validate that the management task completes without warnings. That proves the operational plane is corrected.

The correct answer is Add the updated avpair to include/corp/admin/. Cisco management and operations troubleshooting focuses on control-plane services such as RBAC, AAA, certificates, SNMP, firmware packages, centralized management registration, fault workflows, and node lifecycle state. This item references APIC, RADIUS, so the selected action fixes the management dependency rather than the data-plane symptom. Cisco platforms often allow basic reachability while a higher-level integration still fails because of time synchronization, certificate trust, role mapping, authorization attributes, feature state, or incomplete lifecycle cleanup. The other options either modify forwarding behavior, adjust the wrong credential or role, or bypass the required operational workflow. The engineer should validate the fix by confirming the management session or registration, checking the relevant fault or audit log, and confirming that the user, node, or integration has the expected role and operational status. This is consistent with Cisco DCIT emphasis on operational evidence before and after the change.

The selected option, Add a new nameserver, is correct for the automation path described. Cisco NX-OS requires precision in EEM applets, scheduler jobs, Guest Shell operations, and REST/NX-API syntax. The affected element is Bash, Cisco Nexus, Nexus 9000, Cisco Nexus 9000; therefore, the fix must be applied to the component that actually executes the action. For EEM, that means a valid event detector and explicit actions, with event-default when the matched CLI command should continue. For Guest Shell and Bash, DNS, proxy, resource allocation, and reboot behavior are local to the Linux container. For REST calls, the class name, method, authentication, and XML/JSON structure must match the APIC or NX-OS object model. The distractors usually change the switch globally or alter an unrelated command. Cisco DCIT automation troubleshooting confirms the fix by checking the returned error, then rerunning the exact job, script, or API operation in the same context.

Change the fabric forwarding anycast-gateway-mac MAC address; Enable HMM tracking to advertise host routes into the VXLAN fabric is the valid corrective action because the failure described is a protocol or fabric state problem, not a generic connectivity issue. For VXLAN, NVE, VNI, BGP, Cisco troubleshooting expects the engineer to compare both endpoints of the relationship: vPC peers must agree on consistency parameters, HSRP peers must exchange hellos in the same VLAN and version context, OSPF/BGP peers must match the attributes required for stable adjacency, and VXLAN EVPN must advertise the correct host or prefix information. The selected option restores that required state. The other options either operate on the wrong layer, change a value that is not used to form the relationship, or would make the peer relationship less deterministic. A clean validation is to inspect the control-plane table first, then verify the forwarding table, and finally test end-to-end traffic. This is the Cisco-preferred approach because it avoids random changes and confirms that the fabric is forwarding based on correct protocol state.

Migrate all virtual machines in the EPG-1 to different port groups is the valid corrective action because the failure described is a protocol or fabric state problem, not a generic connectivity issue. For EPG, VMM, Cisco troubleshooting expects the engineer to compare both endpoints of the relationship: vPC peers must agree on consistency parameters, HSRP peers must exchange hellos in the same VLAN and version context, OSPF/BGP peers must match the attributes required for stable adjacency, and VXLAN EVPN must advertise the correct host or prefix information. The selected option restores that required state. The other options either operate on the wrong layer, change a value that is not used to form the relationship, or would make the peer relationship less deterministic. A clean validation is to inspect the control-plane table first, then verify the forwarding table, and finally test end-to-end traffic. This is the Cisco-preferred approach because it avoids random changes and confirms that the fabric is forwarding based on correct protocol state.

https://172.16.10.1/api/node/mo/uni/tn-Test1.xml? rsp-subtree=full & rsp-prop-include=config-only resolves the problem because the symptom is specific to the automation subsystem handling REST API, Cisco Nexus. Nexus automation failures are frequently caused by a missing EEM event statement, absent event-default action, invalid REST path, incorrect JSON or XML syntax, Guest Shell DNS/resource settings, or a scheduler feature that is not enabled. The selected answer corrects that execution prerequisite. The wrong options may make sense for normal switch forwarding, but they do not repair the automation control path. Cisco documentation treats Guest Shell as a separate Linux environment and EEM as a policy engine that can intercept CLI events; both must be validated from their own operational state. A proper verification is to confirm the policy is registered, run the job or API call again, review the response or syslog output, and ensure that normal CLI behavior is preserved after the automation fires.

The answer is Modify the multicast data-group on N7K-SITE1-OTV1 to match N7K-SITE1-OTV2 because Cisco Nexus and ACI forwarding depends on exact agreement between the devices participating in the feature. The scenario references OTV; those technologies fail in predictable ways when required parameters do not match or when the required control-plane advertisement is absent. In DCIT troubleshooting, the engineer should identify the failed dependency, correct that dependency, and then verify the operational table that proves the fix. For example, vPC and EVPN checks focus on consistency, VNI/VRF bindings, peer-gateway behavior, and host-route advertisement; routing checks focus on neighbor state, MTU, timers, authentication, next-hop, and route preference. The selected answer addresses the dependency that blocks forwarding. The distractors are plausible because they touch related features, but they do not resolve the specific failure condition. Post-change validation should include protocol state, learned endpoint or route entries, and a traffic test across the affected path.