To configure PingAccess to write logs to an external database like Oracle, two primary actions are required. First, the Java Database Connectivity (JDBC) driver for the specific database must be made available to the PingAccess application. This is accomplished by placing the driver's JAR file into the PAHOME/lib directory. Second, the PingAccess logging framework, Log4j2, must be configured to use this driver and connect to the database. This involves modifying log4j2.xml to define a JDBC appender and editing log4j2.db.properties to specify the database connection URL, credentials, and other parameters.

B. Removing existing log files is a file system maintenance task and does not configure or enable logging to a new destination.

C. The Audit flag within a Resource's configuration controls whether access to that specific resource is logged, not where the log data is sent.

E. Importing a database certificate is only required if the connection to the database is secured with TLS and the certificate is not already trusted by PingAccess's Java runtime.

1. PingAccess Administrator's Guide, Section: Configuring database logging.

This section explicitly outlines the required steps. It states: "1. Copy the JDBC driver JAR file for your database to the /lib directory." This directly supports answer D.

It continues with: "2. Configure the database connection properties in /conf/log4j2.db.properties." and "3. Configure the JDBC appender in /conf/log4j2.xml." These two points collectively support answer A.