Sometimes, you may like a bit of security-through-obscurity. Some PCI providers even require this.
 You can disable the display of the Apache version by adding the following to your httpd.conf (Generally in /etc/httpd/conf):

ServerSignature Off
ServerTokens Prod

PCI compliance tests require you to disable weak ciphers and older TLS support.
 You can do that by adding the following to your httpd.conf (Generally under /etc/httpd/conf/):

SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:-SSLv2:-RC4:+EXP

Some PCI tests require that you disable the Apache TRACE method as this can reveal sensitive information about the server.
 Doing so is very simple! Add the following to your httpd.conf file (Generally in /etc/httpd/conf/):

TraceEnable off