PwC interview question

How to implement security in APIs