How would you answer an interview scenario involving routing and lazy loading in Angular?

If an administration module is used by a small subset of users, lazy-load it behind an admin route while still enforcing permissions in the backend APIs.