When IIS sends the response to browser it also sends "X-Powered-By" HTTP Headers along with the response. It can pose security risk to your server.
It can be removed via adding following code in the system.webserver section of web.config file of your application:
<remove name="X-Powered-By" />
After adding the above tag the "X-Powered-By" header got removed from the response.