Infosys interview question

how to secure web api