Server information in http-headers?

[pmun 1]

Hey, do you also learn in the courses how to prevent stuff like obvious information exposing in http-headers or something similiar? Because this would go more into the topic webserver configuration right? Or does this count into the "solution finding" part of pentesting and is concluded in the course.

Thanks for the help!

[caneacsu 253]

Webserver configuration is not covered in the PTS course. However, the PWD course covers the defensive part of webserver configuration management. Link below: 

https://www.elearnsecurity.com/course/practical_web_defense/