Does this section ever change? If it does when? Looks to me like this section is "Always" on and the protection against DDoS is always offered. However a similar situation can be found under the firewall/WAF with the section name of "Web Application Firewall". This section is seems to have the same functionality, but does indeed change based on settings. @b00gnish calling for your expertise, to resolve this question.