Remove the Server header in IIS 10 to prevent version disclosure by configuring an outbound rule in web.config using the URL Rewrite Module.