Which of the Following Statements Regarding Security Association (SA) in IPsec

Which of the following statements regarding Security Association (SA) in IPsec is false?

A) An IPsec VPN connection can be established only when the bidirectional SA exists between IPsec peers
B) An SA is identified by three parameters: security parameter index (SPI) , destination IP address, and security protocol ID (AH or ESP)
C) You can run the display ipsec sa command to view the encryption algorithm used and traffic of interest between IPsec peers
D) IPsec can only use symmetric encryption algorithms to encrypt and decrypt data