Providence interview question

How do you protect an API?