What's the use of
X-Powered-By and other similar headers? Looks like the consensus is they should be removed so that automatic vulnerability scanners doen't immediately know which version of which software they're dealing with and so automatic vulnerability discovery gets harder.
Are there scenarios where it is indeed useful to let all the world know that the site is running on IIS 7 and is
X-Powered-By ASP.NET version 4?