Server configuration must be thoroughly reviewed before releasing it into production. Any extraneous file or files that are not strictly necessary for the application's functionality should be removed, as well as all server response headers that may leak relevant information such as the following:

• Server
• X-Powered-By
• X-AspNet-Version
• Version