dig +nocookie +edns=1 +noednsneg +noad +norec +dnssec soa \ $zone @$server expect: status: BADVERS expect: SOA record to NOT be present expect: an OPT record to be present in the additional section expect: DO=1 to be present if the EDNS version 0 DNSSEC query test returned DO=1 expect: EDNS Version 0 in response expect: flag: aa to NOT be present