Synechron interview question

how to handle security in api