cisco zone based firewall deployment modes

Which two types of deployments can be implemented for a zone-based policy firewall?