Your question is Secure API Calls. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
What strategies do you use for ensuring the security of API calls?
Explain how you would protect API calls across service boundaries, including authentication, authorization, input validation, transport security, secrets management, abuse prevention, and auditability. Discuss how controls should be monitored and how you would respond when credentials, tokens, or dependent services are compromised.