"All-in-One Is All You Need." ALL-IN-ONE CSSLP Certified Secure Software Lifecycle Professional EXAMGUIDE THIRD EDITION Complete coverage of all CSSLP Online content exam domains includes: •Test engine that provides full-length Mc Ideal as both a practice exams or Graw customized quizzes Hill by chapter or study tool and an exam domain on-the-job reference Filledwith practiceexamquestions andexplanations WM.ARTHUR CONKLIN DANIEL SHOEMAKER PhD, CompTIA Security+TM, CISSP, CSSLP PhD ALL-IN-ONE CSSLP Certified Secure Software Lifecycle Professional EXAM GUIDE Third Edition Wm. Arthur Conklin Dan Shoemaker Mc Graw Hill New York Chicago San Francisco AthensLondonMadridMexico City MilanNew DelhiSingaporeSydneyToronto McGraw Hill is an independent entity from the International Information Systems Securiy Certification Consortium, Inc., (ISC)2 and is not Professional (CSsLP) exam. Neither (ISC)2 nor McGraw Hill warrant that use of this publication and accompanying media will ensure oassing any exam. (ISC)2*, CSSLP*, CISSP*, CAP,ISSAP, ISSEP*,ISSMP, SSCP°and CBK°are trademarks or registered trademarks of (ISC) in the United States and certain other countries. All other trademarks are trademarks of their respective owners. system, without the prior written permission of the publisher, with the exception that the program listings may be entered, stored, and executed ina computer system, but theymay notbereproducedfor publication. ISBN: 978-1-26-425821-5 MHID: 1-26-425821-6 The material in this eBook also appears in the print version of this title: ISBN: 978-1-26-425820-8, MHID: 1-26-425820-8. eBook conversion by codeMantra Version 1.0 Alltrademarksaretrademarks oftheirrespectiveowners.Ratherthanput atrademarksymbol aftereveryoccurrenceofa trademarked name, we use names in an editorial fashion only, and to the benefit of the trademark owner, with no intention of McGraw-HillEducation eBooksare availableat specialquantitydiscountstouse as premiums and salespromotions orfor Information has been obtained by McGraw Hill from sources believed to be reliable. However, because of the possibility of human or mechanical error by our sources, McGraw Hill, or others, McGraw Hill does not guarantee the accuracy, adequacy, or completeness of any information and is not responsible for any errors or omissions or the results obtained from the use of such information. TERMS OFUSE This is a copyrighted work and McGraw-Hill Education and its licensors reserve all rights in and to the work. Use of this work is subject to these terms. Except as permitted under the Copyright Act of 1976 and the right to store and retrieve one copy of the work,youmay notdecompile,disassemble,reverse engineer,reproduce,modify,create derivativeworksbasedupon,transmit, distribute, disseminate, sell, publish or sublicense the work or any part of it without McGraw-Hill Education's prior consent. You may use thework for your own noncommercial andpersonal use; any other use of the work is strictly prohibited.Your right to use the work may be terminated if you fail to comply with these terms. THEWORKISPROVIDED"ASIS."McGRAW-HILLEDUCATIONANDITSLICENSORSMAKENOGUARANTEES ORWARRANTIESASTOTHEACCURACY,ADEQUACYORCOMPLETENESSOFORRESULTSTOBEOBTAINED VIAHYPERLINKOROTHERWISE,ANDEXPRESSLYDISCLAIMANYWARRANTY,EXPRESSORIMPLIED,IN- CLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PAR- TICULARPURPOSE.McGraw-HillEducation and its licensors do not warrant orguarantee that thefunctions contained in the work will meet your requirements or that its operation will be uninterrupted or error free. Neither McGraw-Hill Education nor its licensors shall be liable to you or anyone else for any inaccuracy, error or omission, regardless of cause, in the work cessed through the work. Under no circumstances shall McGraw-Hill Education and/or its licensors be liable for any indirect, incidental, special,punitive, consequential or similar damages that resultfrom theuse of or inabilityto us