Which two modes for deploying Cisco TrustSec are valid? (Choose two.)