Bigul interview question

Explain how do you perform security testing of API?