Deloitte interview question

How do you implement security on web api