title: should X-Content-Type-Options defined with 404 response?
body: <p>i need to ask if a security headers for example like, X-Content-Type-Options, should be defined with the response not 200? like 404, 301 etc..</p>
  <p>Thank you.</p>