There is nothing stopping you having a second DC - SBS does allow this - what it does not allow is for you to transfer the FSMO roles to another DC.
The best option therfore is to create a second DC and make this a DNS server also - as you will be using AD Integrated DNS, DNS will replicate to the new DC with AD.
If you want more resilliance you could also make the seconf DC an DHCP server as well - so long as the scopes do not overlap. Finally configure all machines with the IPs of both DNS servers - either by setting the Preferred and Alternate DNS server settings in the TCP/IP options - and/or making sure both DNS servers are being specified in the DHCP options