Recently had a customer have a bounce back for an email someone tried to send him with the error

DNS Authentication – DMARC Fail

DMARC Utilises DKIM and SPF records to monitor senders and act accordingly. I checked the domain of the sender’s email using https://otalliance.org/resources/spf-dmarc-tools-record-validator and the domain had no DKIM or SPF but did have a DMARC Record!

You need to have SPF and DKIM records before DMARC