Short answer
HubSpot's KB: Google and Yahoo require DMARC, DKIM and SPF on domains sending bulk email. SPF verifies the server may send for your domain; DMARC tells receivers how to handle failures, with tags like pct setting the share of failing mail the policy applies to. You can't use your domain in the From address until it's connected.
1. Sending domains
Email sending domains in my demo portal.

2. Policy
The policy you publish decides what receivers do with failing mail, so review authentication status in HubSpot before tightening it.