Hi Jim,
I assume you mean either 1. or 2. below, in which case yes, both are possible.
There is a 3rd way, explored by the "FileDownload" example. This uses an interim procedure to serve files from elsewhere on the drive.
Which ever way you go, please be very careful to make sure the necessary _limits_ are in place. What you don't inadvertently want to do is allow people to download files other than the ones you intended.
cheers
Bruce