Sham interview question

How do you secure protected web application