Personaly, I wouldn't use the built-in Exchange Sender ID features, rather I would use a 3rd party product or gateway with more features, however if you enable Sender ID, you can set the action for a SPF Fail:
[https://learn.microsoft.com/en-us/exchange/antispam-and-antimalware/antispam-protection/sender-id?view=exchserver-2019