Cisco Exam Questions

Which statement about the default ACL logging behavior …

Which statement about the default ACL logging behavior of the Cisco ASA is true?

A.
The Cisco ASA generates system message 106023 for each denied packet when a deny ACE is configured.

B.
The Cisco ASA generates system message 106023 for each packet that matched an ACE.

C.
The Cisco ASA generates system message 106100 only for the first packet that matched an ACE.

D.
The Cisco ASA generates system message 106100 for each packet that matched an ACE.

E.
No ACL logging is enabled by default.

Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/acl_logging.html#wp1 076483