Virtual machines need to access three resources—storage1, storage2, and DB1—using service endpoints. Assuming storage1 and storage2 are Azure Storage accounts and DB1 is an Azure SQL resource, what is the minimum number of distinct service endpoints you must create?

You need two distinct service endpoints. Azure service endpoints are configured per service type, not per instance. For Azure Storage, you create one service endpoint for Microsoft.Storage to secure access to all Azure Storage accounts (storage1 and storage2) within that virtual network subnet. Similarly, for Azure SQL Database, you create one service endpoint for Microsoft.Sql to secure access to all Azure SQL Database instances (DB1) within that virtual network subnet. Therefore, one endpoint for Storage and one for SQL results in a total of two distinct service endpoints.