DNS 101 Miniseries #6 - How DNSSEC Works within a Zone
DNSSEC strengthens authentication in DNS using digital signatures based on public key cryptography. With DNSSEC, it's not DNS queries and responses themselves that are cryptographically signed, but rather DNS data itself is signed by the owner of the data.
This video steps through how DNSSEC signs and validates resource records (RRSETS) within a DNS Zone using Zone Signing Keys to create RRSIG records.
Other videos mentioned are in this section of the course, you can access them directly.