An email has two FROM addresses: “envelope address”, and a “letterhead address”. Similar to receiving a physical envelope with an address on the outside and a letter stuffed on the inside with an address on the letter.
SPF only deals with the “envelope address”, DMARC will also deal with the “header address”
DMARC requires that SPF and DKIM are configured.