For a semester exam, which option is correct about secure design review?

A. ignoring threat models B. only selecting fonts C. only checking spelling D. examining architecture to identify security weaknesses before implementation