Generally I think it's best to test from outside of the resolver, e.g.
https://dnstest.dev/ksk-2024/
But it is not very convenient when you test a remote server without
the ability to run a modern browser. ("JavaScript is requiredEnable
JavaScript to run this test.")

Advanced users can do the same tests over command-line.  This web even suggests concrete dig commands.