Realtor.com interview question

How would you secure a public facing API