Formal Verification vs. Simulation