Do I need to turn this on for mod security?

[psalm91]

I suppose for Mod security to work I need to set the Security engine to ON right?

https://imgur.com/8OTarJq

And I suppose to make sure mod security is working I should run some thing like this

domain.com/index.php?SELECT * FROM mysql.users

If it gives me a Forbidden message it means mod security is working for my domain?