Deloitte Interview Question

How do you implement security on web api