We have a student who has two different IP addresses on his CSV report log for an exam. The test runs on a different IP address midway through his exam. We suspect the student tried to re-enter and continue the exam after exiting our testing room from an outside computer. The student continues to deny any wrong doing indicating that he didn't access the exam from outside the testing center. The student also informed our proctor about the submission prior to exiting the room and he verified the exam was submitted. What are some of the possible reasons why there could be two different IP address on his CSV report file? Is the IP address information completely accurate to hold the student liable for violation of academic integrity in this case?