GlobalLogic Interview Question

How to secure a Web API