Ping Identity interview question

How would you secure a publicly facing environment?