bet365 interview question

Could you explain how you would go about securing an API.