Hexaware Technologies interview question

How to make api secure