NTT Corporation interview question

How to secure an API ?