A: Stricly speaking, CC-0200 (via most scanners) targets persistent storage (disk, SSD, backup tape). However, PCI DSS v4.0 now also expects protection in memory. Do not rely on this loophole.
CLASS(0000, "Non-VGA unclassified device") CLASS(0001, "VGA compatible unclassified device") CLASS(0100, "SCSI storage controller" PCI Code and ID Assignment Specification Revision 1.18 Pci Cc-0200