Your question is API Authentication and HTTP Methods. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Tell me about how you authenticate to APIs using bearer tokens, and explain the differences between HTTP GET, POST, PUT, and DELETE.
Address token issuance, transmission, validation, expiry, revocation, and common attack paths. Explain HTTP method safety, idempotency, caching, request bodies, authorization requirements, and how you would verify the implementation in practice.