1. open apache config and set ServerTokens to Prod.
/etc/apache2/conf.d/security
2. set ServerSignature to Off
3. set expose_php to off in php.ini file.
/etc/apache2/conf.d/security
2. set ServerSignature to Off
3. set expose_php to off in php.ini file.