Infosys interview question

how can you secure APIs?