A company's security policy requires that all IIS server banners be removed to prevent information disclosure. Which configuration achieves this in IIS 10?
-
A
Set the Server header to 'None' in web.config
-
B
Use the HTTP Response Headers feature to remove the X-Powered-By header only
-
C
Use the URL Rewrite module outbound rule to delete the Server response header
-
D
Disable the HTTP Logging feature in IIS Manager