Like the others have said, it really depends on workload as to what would be best.

Definitely increase the memory. Num cpus is negotiable - there is a lot more that goes into that selection than just getting a quad-core. There are dual cores out there that provide better performance than some quad-cores.

How many disks do you have - total spindles not number of arrays?