Which three can be used to enforce conditional access in Workspace ONE?

Which three can be used to enforce conditional access in Workspace ONE? (Choose three.)
A. device ownership type
B. device enrollment method
C. device platform
D. application specific
E. network range
F. user-based role