Simulation VS Pen Testing