Thomson Reuters interview question

How to secure a website?