Which of the following statements regarding Security Association (SA) in IPsec is false?

An IPsec VPN connection can be established only when the bidirectional SA exists between IPsec peers 

An SA is identified by three parameters: security parameter index (SPI), destination IP address, and security protocol ID (AH or ESP) 

You can run the display ipsec sa command to view the encryption algorithm used and traffic of interest between IPsec peers 

IPsec can only use symmetric encryption algorithms to encrypt and decrypt data