D is correct because testing high-risk areas first maximizes the value of testing effort - failures in critical functionality cause the most damage. A is suboptimal because finding many trivial faults is less valuable than finding critical ones. B is incomplete - coverage is meaningless if it doesn't target risk. C is wrong because ease of testing has no correlation with business impact or technical risk.