How does DNSSEC secure the exchanges between DNS clients $($resolvers$)$ and servers?

A The DNS server cryptographically signs each response for authenticity.

B DNS clients and servers use TLS to negotiate and create a secure session.

SSH uses TCP port $22$ to carry DNS requests and responses securely between clients and servers.

An IPsec tunnel is created to establish a VPN when clients and servers are separated by the Internet.