_dmarc.contoso.com 3600 IN TXT "v=DMARC1; p=reject"
The p=reject is here the important thing.
For google this is important:
https://support.google.com/a/answer/183895?hl=en#zippy=
>>Google gives you a TXT verification record to add to your domain host’s DNS records. When Google sees the record exists, your domain ownership is confirmed. The verification record does not affect your website or email.