How do you perform API testing, and how would you validate a JSON response payload using Postman or RestAssured?