Which statement about the default ACL logging behavior of the Cisco ASA is true?

Which statement about the default ACL logging behavior of the Cisco ASA is true?

A.
The Cisco ASA generates system message 106023 for each denied packet when a deny ACE is configured.

B.
The Cisco ASA generates system message 106023 for each packet that matched an ACE.

C.
The Cisco ASA generates system message 106100 only for the first packet that matched an ACE.

D.
The Cisco ASA generates system message 106100 for each packet that matched an ACE.

E.
No ACL logging is enabled by default.