To answer the first question, yes you can run multiple VMs on your machine and try among them or even attack your host machine, but won’t recommend. That’ the thing as soon as the Kali machine is turned off, i.e. the attack will automatically stop so don’t worry about that.