zone based policy firewall deployment types

Which two types of deployments can be implemented for a zone-based policy firewall?