Which command verifies phase 2 of an IPsec VPN on a Cisco router?

Which command verifies phase 2 of an IPsec VPN on a Cisco router?

A.
show crypto map

B.
show crypto ipsec sa

C.
show crypto isakmp sa

D.
show crypto engine connection active