Security information and event management (SIEM) software provides a centralized repository for logs, audit events, and security device alerts to detect and notify admins of suspicious activity.
For example, attackers can enable a backdoor on a compromised device that will provide them with undetected access for long periods of time; this problem is often solved by applying patches, but SIEM solutions may detect repeated abnormal login times to a server.

RAID 6 uses two drives' worth of capacity for parity. With four 1TB SSDs, the usable storage is
2TB (4TB total minus 2TB for parity).

A warm site has power, phone, network infrastructure, and other resources already in place, but does not have up-to-date data or running systems. It takes more time to become fully operational than a hot site, but less time than a cold site.

Assuming SD Slots are internal. If so, then Internal SD Slots are recommended.