First Citizens Bank interview question

How do you ensure API security?