Okta interview question

how does a security system work for a web application