thesqua.re interview question

What is an API and how can you secure the Rest API?