What is your approach to API testing, and how do you validate JSON or XML responses against business requirements?