>but how certain are you that _all_ records are restored?

A solution to this is to keep DNS under version control with eg Terraform and deployed by CI. master is then authoritative