Which two modes for deploying cisco Trustsec are valid? Choose two