ExamShield Technical Details

Brief Overview & Technical Information

June 2023

Version 5.0

Public

© 2017 PeopleCert | All rights reserved

Process: Quality Management & Excellence | ID No: ….ver01.0 / 28.12.17 Page 1 of 7
 TABLE OF CONTENTS

1 ABOUT PEOPLECERT ......................................................................................................... 4

2 PEOPLECERT’S QUALITY MANAGEMENT SYSTEM ............................................................. 4

3 PEOPLECERT EXAMSHIELD FOR ONLINE PROCTORED EXAMS .......................................... 5

4 EXAMSHIELD FEATURES .................................................................................................... 5

5 SYSTEM REQUIREMENTS ................................................................................................... 6

6 TECHNICAL DETAILS ......................................................................................................... 6

7 EXAMSHIELD FACT SHEET................................................................................................. 8

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 2 of 11
 Document Revision History

Version Date Description of Change

5.0 07/06/2023 Updates in section 5 System Requirements
4.0 24/02/2022 Updates on Technical Details and on paragraph 7, section 4
3.0 26/11/2021 Content review and recoding from PIS_D_01-15 to ECS_D_36
02.0 23/06/2021 Update System Requirements and Technical Details
01.1 17/03/2021 Revision
01.0 08/01/2021 Initial Version

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 3 of 11
1 About PeopleCert
PeopleCert is a global leader in the assessment and certification of professional and language skills,
partnering with multi-national organisations and government bodies to develop and deliver market
leading exams worldwide. PeopleCert is sole Examination Institute f or the delivery of AXELOS
Accreditation and Examination services worldwide and has been appointed by the UK Visa and
Immigrations office, to deliver to deliver Home Office approved Secure English Language Tests
(SELT) in the UK and globally.

PeopleCert develops state-of-the-art assessment technology under its 4 core values: Quality,
Innovation, Passion and Integrity.

PeopleCert has served over 5.5M, candidates delivering Web & Paper based exams delivered in 25
languages across 200+ countries, with a portfolio of 600 qualifications. It offers Online Proctored
services providing exams at any place, any time, 24/7/365, since 2014.

2 PeopleCert’s Quality Management System

PeopleCert is a Certification Body accredited and regularly audited by the National Hellenic
Accreditation System (E.SY.D., equivalent to the American National Standards Institute), according
to:

PeopleCert’s Integrated Management System covers the whole range of its operations, including
the exam processes and the assessment technology used, and is certified and regularly audited by
Lloyds Register (UK) according to:

Cyber
Essentials

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 4 of 11
3 PeopleCert ExamShield for Online Proctored exams
Every year hundreds of thousands of PeopleCert Online Proctored exams are delivered to Fortune
500 companies, Corporates, Government and Academic organizations around the world, through
PeopleCert’s proprietary software solution, namely ExamShield.

ExamShield has been developed and operates under PeopleCert’s Quality Management System
which is certified and annually audited according to ISO 27001: Information Security, ISO 23988: Use
of IT in the Delivery of Assessments, ISO 17024: Certification of Persons, and Cyber Essentials.

All PeopleCert software is developed in accordance with Software Development Life Cycle
procedures based on Microsoft Security Development Lifecycle (SDL) towards increasing reliability
and software security.

PeopleCert systems are subject to internal (by PeopleCert) and external (by 3 rd parties) penetration
testing and vulnerability assessment, at least one per year and after every major release.

ExamShield is approved for publishing on the Microsoft Store , having successfully passed
Microsoft’s rigorous app certification process, which includes security tests, technical compliance
tests, as well as content compliance checks.
PeopleCert submits every ExamShield release to the top 10 Security software companies for
whitelisting, namely:

• McAfee
• Webroot
• Bitdefender
• Kaspersky
• Avast
• Symantec Norton
• ESET
• F-Secure
• Avira
• AVG

4 ExamShield Features

ExamShield provides a secure exam environment for preventing and mitigating any candidate
actions towards cheating and importantly protecting the integrity of the exam content (content
theft). More specifically:

• Upon initiation of the exam, ExamShield allows only the absolutely necessary for exam taking
candidate actions, prohibiting any candidate navigation or action not related to the exam ( e.g.,
change active window or important Key Combinations).
• ExamShield provides a series of exam infringement prevention features such as terminating or
requiring termination of blacklisted applications like screen capture, keyloggers or
communication software, preventing execution on virtual machines, preventing simultaneous
tests from running and usage of multiple monitors.

ExamShield also acts as the communication bridge between the candidate and PeopleCert’s certified
proctor team. Additionally, through ExamShield, PeopleCert certified Proctors can adjust camera and
microphone settings to ensure the highest possible communication environment with the candidate.

PeopleCert proctors have no further access to the candidate’s system.

ExamShield does not remotely control candidate’s Desktop, Mouse, or Keyboard.

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 5 of 11
5 System Requirements
ExamShield is available for Windows and Mac OS, specifically:

• ExamShield is applicable with Windows® 11, Windows® 10 (Windows 10S and Windows 11S is
not supported) or macOS High Sierra (10.13) onwards
Further system requirements:

• Dual-core 2.4GHz CPU or faster with 4GB of RAM (recommended)

• Active Full-Time/Broadband internet connection of at least 4 Mbps
• 16-bit monitor (at least 15”) with screen resolution 1024 x 768 or higher
• Speakers and microphone (the use of headsets is only allowed during onboarding)
• Keyboard and mouse or another pointing device
• A single web camera (embedded or external) you can rotate

6 Technical Details
ExamShield might require elevated rights upon installation in order to install proper firewall rules.

Upon running, ExamShield application needs to have access to write to the following application
folders:

1. C:\Users\[user] \AppData\Roaming\PeopleCert\ and its subfolders

2. C:\Users\[user]\AppData\Local\ExamShield

ExamShield requires access to the following end points:

Server URL Client Server Port Server IP Traffic Protocol

Port type
https://passport.peoplecert.org 443 45.60.47.233 Outbound HTTPS
https://download.peoplecert.org 443 47.57.182.223 Outbound HTTPS

http://m2m- 80 52.164.241.201 Outbound HTTP

routingservice.peoplecert.org
https://webates.peoplecert.org 443 40.84.236.215 Outbound HTTPS
https://webates-us.peoplecert.org 443 40.84.236.215 Outbound HTTPS
https://webates-au.peoplecert.org 443 13.75.153.155 Outbound HTTPS
https://webates-eu.peoplecert.org 443 52.138.181.169 Outbound HTTPS
https://webates-eu2.peoplecert.org 443 52.169.216.186 Outbound HTTPS
https://webates-eu3.peoplecert.org 443 52.151.94.129 Outbound HTTPS
https://webates-hk.peoplecert.org 443 52.175.14.177 Outbound HTTPS
https://webates-in.peoplecert.org 443 104.211.90.99 Outbound HTTPS
https://webates- 443 47.254.147.44 Outbound HTTPS
cn.peoplecertcn.org.cn (China)
101.201.35.139
(RW)
https://candidate.peoplecert.org 443 40.69.86.80 Outbound HTTPS
http://streaming1.peoplecert.org 80 13.79.240.110 Outbound ΗΤΤP

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 6 of 11
 Server URL Client Server Port Server IP Traffic Protocol
Port type
http://streaming1.peoplecert.org 1853, 5072- 560, 570 13.79.240.110 Inbound & UDP
5074, 8200 Outbound
http://streaming2.peoplecert.org 80 52.169.233.103 Outbound ΗΤΤP
https://streaming2.peoplecert.org 443 52.169.233.103 Outbound ΗΤΤPS
http://streaming2.peoplecert.org 1853, 5072- 560, 570 52.169.233.103 Inbound & UDP
5074, 8200 Outbound
http://streaming3.peoplecert.org 80 52.236.175.56 Outbound HTTP
http://streaming3.peoplecert.org 1853, 5072- 560, 570 52.236.175.56 Inbound & UDP
5074, 8200 Outbound
http://streaming3b.peoplecert.org 80 52.236.175.56 Outbound HTTP
https://streaming3b.peoplecert.org 443 52.236.175.56 Outbound HTTPS
http://streaming3b.peoplecert.org 1853, 5072- 560, 570 52.236.175.56 Inbound & UDP
5074, 8200 Outbound
http://streaming4.peoplecert.org 80 13.81.107.91 Outbound HTTP
http://streaming4.peoplecert.org 1853, 5072- 560, 570 13.81.107.91 Inbound & UDP
5074, 8200 Outbound
http://streaming4b.peoplecert.org 80 13.81.107.91 Outbound HTTP
http://streaming4b.peoplecert.org 1853, 5072- 560, 570 13.81.107.91 Inbound & UDP
5074, 8200 Outbound
https://streaming- 80 47.91.93.9 Outbound HTTP
cn.peoplecertcn.org.cn (China)
59.110.220.174
(RW)
https://streaming- 1853, 5072- 560, 570 47.91.93.9 Inbound & UDP
cn.peoplecertcn.org.cn 5074, 8200 (China) Outbound
59.110.220.174
(RW)
http://streaming-uk.peoplecert.org 80 162.13.64.3 Outbound HTTP
http://streaming-uk.peoplecert.org 1853, 5072- 560, 570 162.13.64.3 Inbound & UDP
5074, 8200 Outbound

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 7 of 11
7 ExamShield Fact Sheet

Section 1: General
PeopleCert is accredited under
• ISO 17024 Certification of persons
• ISO 9001 Quality Management System
• ISO 10002 Customer Satisfaction & Complaints
Handling
• ISO 14001 Environmental Management
Is PeopleCert accredited?
• ISO 27001 Information Security Management System
• ISO 23988 Use of IT in the Delivery of Assessments
• ISO 22301 Business Continuity Management
• TUV Cybersecurity Essentials
PeopleCert’s Online Proctoring is approved by the Hellenic
Accreditation System (ESYD) based on ISO 17024
ExamShield is developed exclusively internally by
Who developed ExamShield?
PeopleCert, following ISO 27001 controls
What is the Software ExamShield follows the Client-Service architecture,
Architecture? communicating with PeopleCert cloud servers.
• Windows 10 and Windows 11 (Windows 10S and 11S
Which Operating Systems are not supported)
supported?
• macOS High Sierra 10.13 and higher

Can ExamShield be deployed on a ExamShield does not operate under any virtualized
virtualized environment? environment.
The latest version of ExamShield can be downloaded from
How is ExamShield downloaded? here, from candidate’s account at
peoplecert.org/overview, or directly from the Microsoft
Store.
Use the Microsoft Store version or download ExamShield
How to deploy ExamShield to from here and utilize your own methodologies and tools to
Candidate computers? automatically deploy to Candidate computers, such as
Group policies, SCCM or later, MDM (e.g. Intune) etc.
Manual deployment is also supported.
• Dual-core 2.4GHz CPU or faster with 4GB of RAM
(minimum)
• Active Full-Time/Broadband internet connection of at
least 4 Mbps
• 16-bit monitor (at least 15”) with screen resolution
What are ExamShield’s system 1024 x 768 or higher
requirements?
• Speakers and microphone (the use of headsets is only
allowed during onboarding)
• Keyboard and mouse or another pointing device
• A single web camera (embedded or external) you can
rotate.

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 8 of 11
Section 2: Policies, Procedures and Compliances followed
PeopleCert is accredited and audited annually
per ISO 27001 since 2010, that details the
Does PeopleCert have a documented
information security management system for
information security framework in place?
both logical (systems and applications) and
physical security
Has PeopleCert outsourced the software No, ExamShield is developed exclusively
development for ExamShield to another internally by PeopleCert, following ISO 27001
third-party provider? controls
Are PeopleCert employees required to Yes, all employees sign Non-Disclosure
sign a confidentiality agreement? Agreements during the hiring process
All developers are trained to follow PeopleCert’s
Software Development Life Cycle procedures
Are PeopleCert developers been trained in
based on Microsoft’s Security Development
secure coding techniques?
Lifecycle (SDL), towards increasing reliability and
software security.
PeopleCert employs a comprehensive
Does PeopleCert have a mandatory
multifaceted security training schedule, which is
security awareness program in place for
mandatory during onboarding and conducted
employees?
twice per year.
Are PeopleCert procedures in place for
PeopleCert employs security incident handling
reporting and responding to possible
procedures in line with ISO 27001.
security incidents?

Section 3: Data Storage & Data Protection

ExamShield transfers candidate’s Audio, Video,
Is there a requirement for data
Desktop and Chat streams, required for the
(Audio/Video/Screenshare/chat) to be
exam sitting purposes, to PeopleCert cloud
transferred/stored elsewhere?
servers.
ExamShield collects and records user and system
Does the system collect and retain logs of
events towards ensuring exam integrity. All data
events such as user events and system
are retained in accordance with PeopleCert’s
events?
retention policy.
Who within PeopleCert organization has Access to the data is provided only to certified
access to this data? Role-based personnel.
Towards ensuring exam integrity and verifying
candidate’s identity ExamShield records
Does ExamShield have access to Sensitive
candidate’s ID document and camera feed. No
Personal Identifiable Data?
additional Sensitive Personal Identifiable data
are collected or processed.

Section 4: Solution
ExamShield is approved for publishing in the
Microsoft Store and has undergone Microsoft’s
strict security tests, technical compliance tests,
as well as content compliance checks.
Is ExamShield safe to use? PeopleCert submits every ExamShield release to
the top 10 Security software companies for
whitelisting, namely, McAfee, Webroot,
Bitdefender, Kaspersky, Avast, Symantec Norton,
ESET, F-Secure, Avira, AVG.

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 9 of 11
 PeopleCert systems are subject to internal
vulnerability assessments (by PeopleCert) at
Does PeopleCert conduct regular security
frequent intervals and external (by CREST
testing of the solution?
accredited parties) penetration testing, at least
one per year and after every major release.
PeopleCert participates in a public vulnerability
disclosure program with certified ethical hackers
Does PeopleCert participate in any public and researchers from 200 different countries.
vulnerability disclosure program? PeopleCert also recently initiated a private bug
bounty program and invited top-notch
researchers to participate.
Does PeopleCert require Remote access to No, PeopleCert and ExamShield do not remotely
the device the ExamShield is installed? control candidate’s desktop, mouse, or keyboard.
Are elevated rights needed on the device In corporate networks, elevated rights might be
the ExamShield is installed? needed depending on the enforced group policy.

© 2023 PeopleCert | All rights reserved

Process: Manage and Support Exams
ID No: ECS_D_36 ExamShield Technical Details ver5.0 | 07/06/2023
Page 10 of 11
Ε-mail: info@peoplecert.org, www.peoplecert.org

Copyright © 2023 PeopleCert International Limited and its affiliates (“PeopleCert”)

All rights reserved. No part of this document or the information in it may be copied, distributed, disclosed or used other
than as authorized by PeopleCert. PeopleCert - All talents certified © is registered trademarks of PeopleCert.

DISCLAIMER

This publication is designed to provide helpful information to the recipient. Although care has been taken by PeopleCert
in preparation of this publication, no representation or warranty (either express or implied) is given by PeopleCert with
respect to the completeness, accuracy or suitability of the information or advice contained within it, and PeopleCert shall
not be held responsible for any loss or damage whatsoever relating to such information or advice.