DMARC builds on SPF and DKIM and specifies how to handle unauthenticated emails: none, quarantine, or reject.