Florida Blue interview question

How do you secure an API route, discuss all possible ways