Which statement about the default ACL logging behavior of the Cisco ASA is true?

Which statement about the default ACL logging behavior of the Cisco ASA is true?

A.
The Cisco ASA generates system message 106023 for each denied packet when a deny ACE
is configured.

B.
The Cisco ASA generates system message 106023 for each packet that matched an ACE.

C.
The Cisco ASA generates system message 106100 only for the first packet that matched an
ACE.

D.
The Cisco ASA generates system message 106100 for each packet that matched an ACE.

E.
No ACL logging is enabled by default.

Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/acl_logging.html#wp107
6483