How to know if a certain policy has brute force , DDOS Attack etc mitigation?

Hello,

In oldest versions, you can check within the anomaly detection pane in your security policy.

In newest vesions, you have DoS profile that you bind to Virtual Server under security tab. It's not under the security policy anymore.