US Air Force interview question

How would you defend against an attack on a SQL database?