WordPress cloning, as it applies to fix wordpress malware fix, is the act of making an exact copy of your WordPress install. What is good is that you can do it in just a couple clicks. There are a number of reasons. Here are only a few.
Don't make the mistake of thinking that your hosting company will have your back as far as WordPress copies go. Not always. It's been my experience that the company may or may not be doing proper backups while they say they do. Take that kind of chance?
It's a WordPress plugin. They're drop dead easy to set up, have all the functions you need for a task like this, and are relatively inexpensive, especially when compared to having additional reading to hire someone to get this done for you.
Now we're getting into matters specific to WordPress. You have to rename it to config.php and alter the file config-sample.php, when you install WordPress. You will need to deploy the database facts see page there.
I prefer to use a WordPress plugin to get the work done. Make sure that the plugin you select is in a position to do select backups, has restore performance, and can replicate. Be sure it is often updated to keep pace with all versions of WordPress. There's absolutely no use in backing up your data and not working.