Pregunta de entrevista de Ericsson

We have our website's server and a database server, how do we protect the db server from attacks?