For a semester exam, which option is correct about security testing?

A. only updating documentation B. only measuring screen resolution C. only checking button alignment D. testing whether software resists security threats and misuse