Inzint interview question

How you will take a approach to secure an API endpoint?