ANSWER:
D: In the middle-tier. The bulk of business logic should be implemented in the middle-tier or business layer whenever possible.
Answer in Depth...