Analyze DNS security configuration — DNSSEC, CAA, SPF, DMARC, zone transfer restrictions, and open resolvers.