Monitoring
What Happens When a Rule Is Broken?
Learn how violation rules work in ExamLive. See what triggers warnings, how limits are counted, and what happens at the threshold.
Where rules live
Rules are per test, set in Settings › Security: a Violation Limit and a Violation Action. The full setup walkthrough is in Security & Monitoring Settings.
What triggers a violation
Four behaviors are always detected during a session:
| Event | Trigger |
|---|---|
| Tab Switch | Moving to another browser tab |
| Window Blur | Clicking away from or leaving the test window |
| Fullscreen Exit | Leaving fullscreen while it's required |
| Copy/Paste | Attempting to copy or paste text |
Each is timestamped the moment it happens and counted against that person.
What the participant sees
Every event produces an instant on-screen warning naming what happened and how many warnings remain. If fullscreen was required and they left it, their screen stays covered until they re-enter. There's no silent monitoring from their perspective; they always know they were flagged.
Reaching the limit
When someone accumulates the number of violations you set, the chosen action fires automatically:
- Do Nothing: they're shown the warning and may continue.
- End & submit their test: their test closes and submits with whatever was answered so far, clearly marked as an automatic submission so you know it wasn't self-initiated.
No one is ever locked out silently or flagged without action; those are the only two outcomes.
Afterward
The complete event history shows up in live monitoring during the test and on the submission afterward, giving you context when grading: ten tab switches tells a different story than none.