5 and 10 are way too small. If you just want to trigger the feature, the easiest way is to set the value 1 to Static Requests/second and Dynamic Requests/second, then visiting any page should get you a 403 error.
To trigger the connection limit, you can use a benchmark tool or command to simulate a specific number of connection numbers.
In general, value 10000 is ok. For heavy sites, I'd put 100000 to Connection Soft Limit and Connection Hard Limit.