Why is it better for a security tester to take a copy of a server e.g. eBay server and test it on a virtual machine rather than on than the real eBay server?
E.g. doing security testing on the live server can cause damage and cause the eBay services to be unavailable. (e.g. SQL injection attacks can erase the eBay database)
Why does a virtual machine prevent major security risks or any risk like these?