1) Security is for exploiting 2) If they are well versed on the drivers that virtualization technologies use, then yes they can tell they are on a virtual machine and not on dedicated server. 3) You can bridge network connection "physically on the network" minus the nic of course 4) Virtualization servers "VMware, VirtualBox" offer clients to connect to the servers, ssh, sftp is also possible as is done with regular servers.
Regards, Ninus