EY interview question

How do you secure your api