Western Governors University (WGU) ITEC2034 D385 Software Security and Testing Practice Test

In HTTP, the information about the server software is typically shared through the Server response header. This header tells the client what server software is running (and sometimes the version), such as a value like nginx/1.18.0 or Apache/2.4.46. That’s why this header is the best match for revealing the server’s software.

Other headers have different purposes: Accept lists the content types the client can handle, User-Agent identifies the client making the request, and Content-Type indicates the type of the response body. So they don’t reveal the server software. Keep in mind some servers may omit or obscure the Server header for security reasons.