In the headers, yes. But you can still put whatever you want in the response body alongside that 404 code in the header