ExamShield Technical Details

Brief Overview & Technical Information

April 2024
Version 6.0Public© 2017 PeopleCert | All rights reserved
Process: Quality Management & Excellence | ID No: ….ver01.0 / 28.12.17

Page 1 of 7

TABLE OF CONTENTS

1ABOUT PEOPLECERT ................................................................................................................... 42PEOPLECERT’S QUALITY MANAGEMENT SYSTEM ................................................................... 43

PEOPLECERT EXAMSHIELD FOR ONLINE PROCTORED EXAMS .............................................. 54

EXAMSHIELD FEATURES ............................................................................................................. 55SYSTEM REQUIREMENTS ........................................................................................................... 66TECHNICAL DETAILS ................................................................................................................... 77EXAMSHIELD FACT SHEET ......................................................................................................... 9© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 2 of 12

Document Revision History
VersionDate

6.0
5.0
4.0
3.0
2.0
1.1
1.0

08/04/2024
07/06/2023
24/02/2022
26/11/2021
23/06/2021
17/03/2021
08/01/2021

Description of Change
2024 Rebranding
Updates in section 5 System Requirements
Updates on Technical Details and on paragraph 7, section 4
Content review and recoding from PIS_D_01-15 to ECS_D_36
Update System Requirements and Technical Details
RevisionInitial Version© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 3 of 12

PeopleCert is a global leader in the assessment and certiﬁcation of professional and language skills,
partnering with multi-national organisations and government bodies to develop and deliver market
leading exams worldwide. PeopleCert is sole Examination Institute for the delivery of AXELOS
Accreditation and Examination services worldwide and has been appointed by the UK Visa andImmigrations office, to deliver to deliver Home Office approved Secure English Language Tests(SELT) in the UK and globally.
PeopleCert develops state-of-the-art assessment technology under its 4 core values: Quality,Innovation, Passion and Integrity.
PeopleCert has served over 5.5M, candidates delivering Web & Paper based exams delivered in 25
languages across 200+ countries, with a portfolio of 600 qualifications. It offers Online Proctored
services providing exams at any place, any time, 24/7/365, since 2014.

PeopleCert is a Certification Body accredited and regularly audited by the National Hellenic
Accreditation System (E.SY.D., equivalent to the American National Standards Institute), according to:PeopleCert’s Integrated Management System covers the whole range of its operations, including theexam processes and the assessment technology used, and is certified and regularly audited by Lloyds
Register (UK) according to:

CyberEssentials© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 4 of 12

Every year hundreds of thousands of PeopleCert Online Proctored exams are delivered to Fortune 500
companies, Corporates, Government and Academic organizations around the world, throughPeopleCert’s proprietary software solution, namely ExamShield.
ExamShield has been developed and operates under PeopleCert’s Quality Management System
which is certified and annually audited according to ISO 27001: Information Security, ISO 23988: Useof IT in the Delivery of Assessments, ISO 17024: Certification of Persons, and Cyber Essentials.
All PeopleCert software is developed in accordance with Software Development Life Cycle
procedures based on Microsoft Security Development Lifecycle (SDL) towards increasing reliability andsoftware security.
PeopleCert systems are subject to internal (by PeopleCert) and external (by 3 rd parties) penetration
testing and vulnerability assessment, at least one per year and after every major release.
ExamShield is approved for publishing on the Microsoft Store, having successfully passed Microsoft’s
rigorous app certification process, which includes security tests, technical compliance tests, as well ascontent compliance checks.
PeopleCert submits every ExamShield release to the top 10 Security software companies forwhitelisting, namely:•McAfee•Webroot•

Bitdefender•

Kaspersky•

Avast•

Symantec Norton•

ESET•

F-Secure•

Avira•AVGExamShield provides a secure exam environment for preventing and mitigating any candidate
actions towards cheating and importantly protecting the integrity of the exam content (contenttheft). More specifically:•Upon initiation of the exam, ExamShield allows only the absolutely necessary for exam taking
candidate actions, prohibiting any candidate navigation or action not related to the exam (e.g.,change active window or important Key Combinations).

•ExamShield provides a series of exam infringement prevention features such as terminating orrequiring termination of blacklisted applications like screen capture, keyloggers or communication
software, preventing execution on virtual machines, preventing simultaneous tests from runningand usage of multiple monitors.

© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 5 of 12

ExamShield also acts as the communication bridge between the candidate and PeopleCert’s certified
proctor team. Additionally, through ExamShield, PeopleCert certified Proctors can adjust camera andmicrophone settings to ensure the highest possible communication environment with the candidate.
PeopleCert proctors have no further access to the candidate’s system.
ExamShield does not remotely control candidate’s Desktop, Mouse, or Keyboard.

ExamShield is available for Windows and Mac OS, specifically:•

ExamShield is applicable with Windows® 11, Windows® 10 (Windows 10S and Windows 11S isnot supported) or macOS High Sierra (10.13) onwards

Further system requirements:•Dual-core 2.4GHz CPU or faster with 4GB of RAM (recommended)•Active Full-Time/Broadband internet connection of at least 4 Mbps•

16-bit monitor (at least 15”) with screen resolution 1024 x 768 or higher•Speakers and microphone (the use of headsets is only allowed during onboarding)•Keyboard and mouse or another pointing device•A single web camera (embedded or external) you can rotate© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 6 of 12

ExamShield might require elevated rights upon installation in order to install proper firewall rules.
Upon running, ExamShield application needs to have access to write to the following application folders:
1. C:\Users\[user] \AppData\Roaming\PeopleCert\ and its subfolders
2. C:\Users\[user]\AppData\Local\ExamShield
ExamShield requires access to the following end points:Server PortServer IP

Traffictype

Protocolhttps://passport.peoplecert.org

443

45.60.47.233

Outbound

HTTPS

https://download.peoplecert.org

443

47.57.182.223

Outbound

HTTPS

http://m2mroutingservice.peoplecert.org

80

52.164.241.201

Outbound

HTTP

https://webates.peoplecert.org

443

40.84.236.215

Outbound

HTTPS

https://webates-us.peoplecert.org

443

40.84.236.215

Outbound

HTTPS

https://webates-au.peoplecert.org

443

13.75.153.155

Outbound

HTTPS

https://webates-eu.peoplecert.org

443

52.138.181.169

Outbound

HTTPS

https://webates-eu2.peoplecert.org

443

52.169.216.186

Outbound

HTTPS

https://webates-eu3.peoplecert.org

443

52.151.94.129

Outbound

HTTPS

https://webates-hk.peoplecert.org

443

52.175.14.177

Outbound

HTTPS

https://webates-in.peoplecert.org

443

104.211.90.99

Outbound

HTTPS

Outbound

HTTPS

Server URL

Client Port

47.254.147.44(China)https://webatescn.peoplecertcn.org.cn

443

https://candidate.peoplecert.org

443

40.69.86.80

Outbound

HTTPS

http://streaming1.peoplecert.org

80

13.79.240.110OutboundΗΤΤP

560, 570

13.79.240.110

Inbound &Outbound

UDP

http://streaming2.peoplecert.org

80

52.169.233.103

OutboundΗΤΤP

https://streaming2.peoplecert.org

443

52.169.233.103

OutboundΗΤΤPS

560, 570

52.169.233.103

Inbound &Outbound

UDP

80

52.236.175.56

Outbound

HTTP

560, 570

52.236.175.56

Inbound &Outbound

UDP

http://streaming3b.peoplecert.org

80

52.236.175.56

Outbound

HTTP

https://streaming3b.peoplecert.org

443

52.236.175.56

Outbound

HTTPS

560, 570

52.236.175.56

Inbound &Outbound

UDP

80

13.81.107.91

Outbound

HTTP

560, 570

13.81.107.91

Inbound &Outbound

UDP

80

13.81.107.91

Outbound

HTTP

560, 570

13.81.107.91

Inbound &Outbound

UDP

http://streaming1.peoplecert.org

http://streaming2.peoplecert.org

1853, 50725074, 8200

1853, 50725074, 8200

http://streaming3.peoplecert.org
http://streaming3.peoplecert.org

http://streaming3b.peoplecert.org

1853, 50725074, 8200

1853, 50725074, 8200

http://streaming4.peoplecert.org
http://streaming4.peoplecert.org

1853, 50725074, 8200

http://streaming4b.peoplecert.org
http://streaming4b.peoplecert.org

1853, 50725074, 8200

101.201.35.139(RW)© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 7 of 12

Server URL

Client Port

https://streamingcn.peoplecertcn.org.cn

https://streamingcn.peoplecertcn.org.cn

801853, 50725074, 8200

http://streaming-uk.peoplecert.org
http://streaming-uk.peoplecert.org

Server Port

1853, 50725074, 8200

560, 570

Server IP
47.91.93.9(China)59.110.220.174(RW)
47.91.93.9(China)59.110.220.174(RW)

Traffictype

ProtocolOutbound

HTTP

Inbound &Outbound

UDP80

162.13.64.3Outbound

HTTP560, 570

162.13.64.3

Inbound &OutboundUDP© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 8 of 12

Section 1: General
PeopleCert is accredited under

Is PeopleCert accredited?

•ISO 17024 Certification of persons•

ISO 9001 Quality Management System•

ISO 10002 Customer Satisfaction & Complaints
Handling•

ISO 14001 Environmental Management•

ISO 27001 Information Security Management System•

ISO 23988 Use of IT in the Delivery of Assessments•

ISO 22301 Business Continuity Management•

TUV Cybersecurity Essentials

PeopleCert’s Online Proctoring is approved by the Hellenic
Accreditation System (ESYD) based on ISO 17024
Who developed ExamShield?

ExamShield is developed exclusively internally byPeopleCert, following ISO 27001 controls

What is the Software
Architecture?

ExamShield follows the Client-Service architecture,communicating with PeopleCert cloud servers.

Which Operating Systems aresupported?

•Windows 10 and Windows 11 (Windows 10S and 11S
not supported)•macOS High Sierra 10.13 and higher

Can ExamShield be deployed ona virtualized environment?

ExamShield does not operate under any virtualizedenvironment.

How is ExamShield downloaded?

The latest version of ExamShield can be downloaded fromhere, from candidate’s account at peoplecert.org/overview,or directly from the Microsoft Store.

How to deploy ExamShield toCandidate computers?

Use the Microsoft Store version or download ExamShieldfrom here and utilize your own methodologies and tools toautomatically deploy to Candidate computers, such asGroup policies, SCCM or later, MDM (e.g. Intune) etc.
Manual deployment is also supported.

What are ExamShield’s system
requirements?

•Dual-core 2.4GHz CPU or faster with 4GB of RAM(minimum)•

Active Full-Time/Broadband internet connection of atleast 4 Mbps•

16-bit monitor (at least 15”) with screen resolution 1024
x 768 or higher•

Speakers and microphone (the use of headsets is only
allowed during onboarding)•Keyboard and mouse or another pointing device•

A single web camera (embedded or external) you canrotate.

© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 9 of 12

Section 2: Policies, Procedures and Compliances followed
Does PeopleCert have a documented
information security framework in place?

PeopleCert is accredited and audited annually per
ISO 27001 since 2010, that details the information
security management system for both logical(systems and applications) and physical security

Has PeopleCert outsourced the softwaredevelopment for ExamShield to anotherthird-party provider?

No, ExamShield is developed exclusively
internally by PeopleCert, following ISO 27001
controls

Are PeopleCert employees required to signa confidentiality agreement?

Yes, all employees sign Non-Disclosure
Agreements during the hiring process

Are PeopleCert developers been trained insecure coding techniques?

All developers are trained to follow PeopleCert’s
Software Development Life Cycle procedures
based on Microsoft’s Security Development
Lifecycle (SDL), towards increasing reliability andsoftware security.

Does PeopleCert have a mandatory
security awareness program in place for
employees?

PeopleCert employs a comprehensive
multifaceted security training schedule, which ismandatory during onboarding and conducted
twice per year.

Are PeopleCert procedures in place forreporting and responding to possible
security incidents?

PeopleCert employs security incident handlingprocedures in line with ISO 27001.

Section 3: Data Storage & Data Protection
Is there a requirement for data
(Audio/Video/Screenshare/chat) to betransferred/stored elsewhere?

ExamShield transfers candidate’s Audio, Video,
Desktop and Chat streams, required for the examsitting purposes, to PeopleCert cloud servers.

Does the system collect and retain logs ofevents such as user events and system
events?

ExamShield collects and records user and system
events towards ensuring exam integrity. All data
are retained in accordance with PeopleCert’s
retention policy.

Who within PeopleCert organization has
access to this data?

Access to the data is provided only to certified
Role-based personnel.

Does ExamShield have access to Sensitive
Personal Identifiable Data?

Towards ensuring exam integrity and verifying
candidate’s identity ExamShield records
candidate’s ID document and camera feed. No
additional Sensitive Personal Identifiable data arecollected or processed.

© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 10 of 12

Section 4: SolutionIs ExamShield safe to use?

ExamShield is approved for publishing in theMicrosoft Store and has undergone Microsoft’s
strict security tests, technical compliance tests, aswell as content compliance checks.
PeopleCert submits every ExamShield release to
the top 10 Security software companies forwhitelisting, namely, McAfee, Webroot,
Bitdefender, Kaspersky, Avast, Symantec Norton,ESET, F-Secure, Avira, AVG.

Does PeopleCert conduct regular security
testing of the solution?

PeopleCert systems are subject to internal
vulnerability assessments (by PeopleCert) at
frequent intervals and external (by CRESTaccredited parties) penetration testing, at least
one per year and after every major release.

Does PeopleCert participate in any publicvulnerability disclosure program?

PeopleCert participates in a public vulnerability
disclosure program with certified ethical hackers
and researchers from 200 different countries.
PeopleCert also recently initiated a private bug
bounty program and invited top-notch researchers
to participate.

Does PeopleCert require Remote access tothe device the ExamShield is installed?

No, PeopleCert and ExamShield do not remotely
control candidate’s desktop, mouse, or keyboard.

Are elevated rights needed on the device
the ExamShield is installed?

In corporate networks, elevated rights might beneeded depending on the enforced group policy.

© 2024 PeopleCert | All rights reserved
Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver6.0 | 08/04/2024
Page 11 of 12Ε-mail: info@peoplecert.org, www.peoplecert.org
Copyright © 2024 PeopleCert International Limited and its affiliates (“PeopleCert”)
All rights reserved. No part of this document or the information in it may be copied, distributed, disclosed orused other than as authorized by PeopleCert. PeopleCert: Dream It, Do It® and the Swirl logo are registeredtrademarks of PeopleCert.
DISCLAIMER
This publication is designed to provide helpful information to the recipient. Although care has been taken
by PeopleCert in preparation of this publication, no representation or warranty (either express or implied) isgiven by PeopleCert with respect to the completeness, accuracy or suitability of the information or advice
contained within it, and PeopleCert shall not be held responsible for any loss or damage whatsoever relating tosuch information or advice.