default acl logginf behaviour of asa

Which statement about the default ACL logging behavior of the Cisco ASA is true?